1865 Commits

Author SHA1 Message Date
Michal Hrusecky
1be343f776 knot-resolver: Update to version 5.7.1
- Fixes CVE-2023-50868 and CVE-2023-50387
- Also, the resolver has not been called 'Knot DNS Resolver' for quite
some time, so fix that, too.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit 1131acf57f)
2024-03-24 11:40:20 +01:00
krant
351120c0e5 squid: fix configure options
- Remove non-existing 'dlmalloc' option
- Use 'with-cap' instead of 'with-libcap'
- Use 'with-xml2' instead of 'with-libxml2'
- Patch configure.ac to properly handle 'with-nettle'

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
(cherry picked from commit f58be51721)
2024-02-21 17:15:51 +01:00
krant
78e17e632d squid: update to 6.7
- Switch URL to HTTPS
- Remove default/obsolete configure options
- Fix and refresh the patch

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
(cherry picked from commit 4007a08529)
2024-02-21 17:15:47 +01:00
Eneas U de Queiroz
0ae12de2b3 squid: bump to release 5.7
This is the latest version and brings compatibility with OpenSSL 3.0.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 78dcc29e47)
2024-02-15 07:48:32 +01:00
Stijn Tintel
a9e3afd754 squid: trim trailing space
Found with modified Kconfiglib.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit d3ef994b35)
2024-02-13 15:25:21 +01:00
Michael Heimpold
154b271eb1 squid: fix compilation with libxml (refs #19099)
Add a patch which removes a call in Libxml2Parser.cc to 'xmlSetFeature'.
This function belongs to the 'depreciated' API part and is not
available in OpenWrt builds.

According to my understanding, this call can be removed safely since
it disables the feature "substitute entities" which is disabled by default.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 3ec47dc85c)
2024-02-13 14:54:57 +01:00
Jeffery To
2219ac4fde python-ubus: Update to 0.1.2
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 99d8554bcd)
2023-11-02 01:50:00 +01:00
Daniel Golle
8cc66d20fe exim: update to version 4.96.2
Fixes vulnerabilities:
 - Improper Neutralization of Special Elements (CVE-2023-42117)
 - dnsdb Out-Of-Bounds Read (CVE-2023-42119)

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 86ec7b19bc)
2023-10-31 11:10:24 +01:00
Christian Marangi
02176ce13b zsh: backport PCRE2 patches and move to it
Backport PCRE2 patches from upstream and move package to PCRE2 library
as PCRE is EOL and won't receive any security update anymore.

Patch are backported with minimal change, only the Changelog change is
commented out as it would conflict and makes no sense to adapt for the
purpose of backport patches.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 5b929fde5f)
2023-10-16 14:56:51 +02:00
Oskari Rauta
d6a5230862 zsh: use autoreconf PKG_FIXUP to configure
In preparation to PCRE2 fixup, use autoreconf PKG_FIXUP as a better
configure system instead of configure script. This is needed to reduce
upcoming patch to migrate to PCRE2 library.

To correctly use autoreconf it's needed to declare empty
PKG_REMOVE_FILES.

zsh include custom macro in the default aclocal.m4
When autoreconf PKG_FIXUP is used, if PKG_REMOVE_FILES is not defined,
it's set to remove the file aclocal.m4 by default resulting in problem
with the custom macro AC_PROG_LN.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
[ split to 2 commit, add PKG_REMOVE_FILES, reword commit description ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit a7f837c98b)
2023-10-16 14:56:46 +02:00
John Audia
08ee67bc95 zsh: update to 5.9
Bump to latest release

Build system: x86_64
Build-tested: bcm2711/RPi4B
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit de2ff3a5f1)
2023-10-16 14:56:32 +02:00
John Audia
f436428466 zsh: update to 5.8.1
Build system: x86_64
Build-tested: bcm2711/RPi4B
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <graysky@archlinux.us>
(cherry picked from commit 034da11e2b)
2023-10-16 14:56:30 +02:00
Daniel Golle
79804fa23c exim: update to version 4.96.1
This is a security release.

JH/01 Bug 2999: Fix a possible OOB write in the external authenticator, which
      could be triggered by externally-supplied input.  Found by Trend Micro.
      CVE-2023-42115

JH/02 Bug 3000: Fix a possible OOB write in the SPA authenticator, which could
      be triggered by externally-controlled input.  Found by Trend Micro.
      CVE-2023-42116

JH/03 Bug 3001: Fix a possible OOB read in the SPA authenticator, which could
      be triggered by externally-controlled input.  Found by Trend Micro.
      CVE-2023-42114

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 7c8f4a2a1c)
2023-10-08 08:32:02 +02:00
Anton Ryzhov
a8c34cbed0 restic-rest-server: fix configuration option names
Signed-off-by: Anton Ryzhov <anton@ryzhov.me>
(cherry picked from commit c61ed3e93f)
2023-10-07 19:23:07 +02:00
Hirokazu MORIKAWA
95ed7fcc7b mg: switch pcre to pcre2
Switch pcre to pcre2
https://github.com/openwrt/packages/issues/22006

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 3d11e5c197)
2023-10-06 11:04:31 +02:00
Hirokazu MORIKAWA
b211715d47 mg: bump to 7.3
Description:
Sync to OpenBSD 7.3

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit e25f57b602)
2023-10-06 11:04:31 +02:00
Tianling Shen
2a12cc5209 wget: Update to 1.21.4
Removed upstreamed patches and unneeded autoreconf.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 54593c0ba9)
2023-10-06 11:54:45 +08:00
Josef Schlehofer
4ebd2dac3c knot: update to version 3.2.10
Release notes:
https://www.knot-dns.cz/2023-09-10-version-3210.html
https://www.knot-dns.cz/2023-07-27-version-329.html
https://www.knot-dns.cz/2023-06-26-version-328.html
https://www.knot-dns.cz/2023-06-06-version-327.html

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-10-05 12:26:54 +02:00
Christian Marangi
f8f100f9c9 atftp: move to PCRE2
Move atftp to PCRE2 as PCRE is flagged as EOL and won't receive security
updates anymore.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit f81a1a1212)
2023-10-04 18:38:40 +02:00
Christian Marangi
bda03b4a84 atftp: bump to release 0.8.0
Bump to release 0.8.0. Autorecong is now needed to correctly compile the
package.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 364fe00b17)
2023-10-04 18:38:31 +02:00
Rosen Penev
593fc7ca79 atftp: update to 0.7.5
Remove upstreamed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0ad6384b5f)
2023-10-04 18:37:59 +02:00
Huangbin Zhan
9618e1dd4c atftpd: fix conffiles
Add missing conffiles
Fix conffile permission

Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
(cherry picked from commit 3d66be4203)
2023-10-04 18:37:47 +02:00
Jan Kratochvil
5aa7afd338 ffmpeg: Add avi muxer
Otherwise one cannot produce *.avi containers needed for some H.264
camera codecs.

Signed-off-by: Jan Kratochvil <jan@jankratochvil.net>
(cherry picked from commit 62f01d7b36)
2023-10-04 18:33:57 +02:00
Hauke Mehrtens
5403af094f btrfs-progs: Update to version 6.0.1
This fixes compilation problems with glibc 2.36.

Full Changelog:
btrfs-progs-6.0 (2022-10-11)
-----------------------------
   * fi usage: in tabular output, print total size and slack size
   * mkfs:
      * option -O now accepts values from -R to unify the interface (-R will
	continue to work)
      * zone reset and discard is done in parallel on all devices
      * removed option --leafsize, deprecated long time ago
   * corrupt-block: recalculate checksum when changing generation
   * fixes:
      * convert: fix reserved range detection and overlaps
      * mkfs: fix creating files with reserved inode numbers with --rootdir
      * receive: escape filenames in command attributes
      * fix extent buffer leaks after transaction abort
   * experimental:
      * mkfs: support for block-group-tree (kernel 6.1)
      * fsverity in send (protocol v3, WIP)
      * btrfstune -b converts to block-group-tree
   * other:
      * cleanups, refactoring
      * new and updated tests
      * update documentation

btrfs-progs-6.0.1 (2022-11-04)
""""""""""""""""""""""""""""""
   * send: minor speed up for v2 due to increased buffer size
   * resize: invalid command line options fail with error code
   * quota rescan:
      * add long options --status and --wait
      * new option to wait but don't start rescan
   * qgroup show: print path by default, updated format
   * qgroup: new subcommand clear-stale, remove qgroups without their subvolumes
   * experimental:
      * add warnings to commands that have it enabled (mkfs, image, btrfstune)
   * other:
      * documentation, help text, error message updates

btrfs-progs-5.19 (2022-08-16)
-----------------------------
   * send: support protocol version 2
   * fi show: print all missing devices
   * device stats: add tabular output
   * replace: add alias to device group (device replace)
   * check: validate free space tree items
   * fixes:
      * convert: support large filesystems (block count > 32bit)
      * recognize filesystems with verity enabled
      * mkfs and DUP could write out of order, fix it for zoned mode
   * build:
      * optional support for LZO and ZSTD in receive
      * compatibility with glibc 2.36 (mount.h)
      * add fallbacks for new GCC builtins
   * other:
      * corrupt-block: target specific items, offsets
      * documentation updates, new pages from wiki
      * new tests

btrfs-progs-5.19.1 (2022-09-12)
"""""""""""""""""""""""""""""""
   * fix memory leaks (extent buffer, path)
   * check: verify block device size vs item
   * rescue fix-device-size: allow to shrink device item
   * receive: fix crash on wrong pinter free()
   * other:
      * experimental: support for block-group-tree
      * documentation updates
      * new tests

btrfs-progs-5.18 (2022-05-25)
-----------------------------
   * fixes:
      * dump-tree: don't print traling zeros in checksums
      * recognize paused balance as exclusive operation state, allow to start
        device add
      * convert: properly initialize target filesystem label
      * mkfs: don't create free space bitmaps for empty filesystem
   * restore: make lzo support build-time configurable, print supported
     compression in help text
   * update kernel-lib sources
   * other:
      * documentation updates, finish conversion to RST, CHANGES and INSTALL
        could be included into RST
      * fix build detection of experimental mode
      * new tests

btrfs-progs-5.18.1 (2022-06-06)
"""""""""""""""""""""""""""""""
   * fixes:
      * convert: fix self reference of toplevel directory
      * build: make kernel lib headers compatible with C++
   * zoned mode: verify minimum zone size 4MiB
   * libbtrfs: cleanups, merge headers and remove declarations of unexported
     symbols
   * other: documentation updates

btrfs-progs-5.17 (2022-04-26)
-----------------------------
   * check:
      * repair wrong num_devices in superblock
      * recognize overly long xattr names
      * fix wrong total bytes check for seed device
   * auto-repair on read on RAID56
   * property set: unify handling of empty value to mean default, changed meaning
     for property 'compression' to allow reset to default and to set NOCOMPRESS,
     since kernel 5.14
   * fixes:
       * dump-tree: print fs-verity items
       * fix location of system chunk on zoned filesystem
       * do not allow setting seeding flag on a filesystem with dirty log
       * mkfs and subpage support: use sectorsize as nodesize fallback for mixed
	 profiles
   * preparatory work for extent tree v2, global roots
   * experimental feature (unstable interface, not built by default,
       do not use for production)
       * btrfstune: option --csum to switch checksum algorithm
   * other:
       * cleanups, refactoring
       * update documentation build, remove asciidocs leftovers
       * update fssum to consider xattrs
       * add fsstress

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 99f5604905)
(cherry picked from commit 12bc0789a1)
2023-10-04 18:09:05 +02:00
Rosen Penev
ac463d2cf8 btrfs-progs: update to 5.16.1
Disable libudev to avoid dependency.

Backport patch to fix 64-bit int types under ppc64 and mips64.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 06de9e9958)
2023-10-04 18:08:54 +02:00
Josef Schlehofer
286aa52a2e syslog-ng: update to version 4.4.0
- Release notes:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.4.0

- Bump version in config file

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 4dd49d7c3c)
2023-10-04 18:05:20 +02:00
Daniel Golle
d6152cc032 exim: apply hotfix for some ZDI reported vulnerabilities
Apply preliminary hotfix for some (three?) of the 0-day
vulnerabilities reported by ZDI.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit db85d9ead6)
2023-10-04 12:10:24 +02:00
Matthias Schiffer
2db418f670 libuecc: update repository URL
I've changed my username to neocturne.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit 1df594bc01)
2023-09-28 10:44:09 +02:00
Christian Marangi
e5b7e46eff apache: move to PCRE2
Move apache to PCRE2 now that PCRE is flagged EOL and won't receive any
security update.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit d14fe0c51c)
2023-09-28 10:43:34 +02:00
Christian Marangi
2e9a63a900 apache: bump to release 2.4.57
Bump apache to release 2.4.57 and refresh patch automatically.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 86f9af41c1)
2023-09-28 10:43:31 +02:00
Leon M. Busch-George
a0fa77fafe wget: use pcre2
Pcre (1) is unmaintained and reached its end of life in 2021.
The base system provides pcre2 exclusively since May.

Signed-off-by: Leon M. Busch-George <leon@georgemail.eu>
(cherry picked from commit 379946951c)
2023-09-27 18:56:01 +02:00
Hannu Nyman
2b3839e3e2 wget: apply upstream fix to avoid nettle linking in nossl
Replace my own patch with the upstream solution, which they issued
in response to my bug report.
(Two patches as they overlooked something on the first try.
Reference to https://savannah.gnu.org/bugs/index.php?63431 )

The nettle lib evaluation is now conditional to not having "--disable-ntlm".

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit fd7da3333e)
2023-09-27 18:55:54 +02:00
Hannu Nyman
da0e7c29ef wget: update to 1.21.3
Update wget to 1.21.3

* Remove patch 100-fix-hsts-time.patch as upstream has issued
  its own version on the fixes

* Add a hack (and fixup autoreconf) to fix an upstream bug that
  forces the nettle library into nossl even if NTLM is disabled.
  Upstream bug filed: https://savannah.gnu.org/bugs/?63431

* Remove old maintainer who has not been active

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit a694130993)
2023-09-27 18:55:49 +02:00
Huangbin Zhan
a75ddf0974 wget: update to 1.21.2
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
(cherry picked from commit 9ac16d4528)
2023-09-27 18:55:42 +02:00
Huangbin Zhan
89e73b369c wget: fix hsts time
`time_t` on musl 1.2 is 64bit, while `long` is 32 bit. we will always get zero time with the original source on mips big endian.

Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
(cherry picked from commit 0907651268)
2023-09-27 18:55:31 +02:00
Josef Schlehofer
4070b265e8 czmq: drop libpcre dependency
It seems like the libpcre dependency was added by mistake.
While checking in the source code of czmq (Makefile.am, CMakeLists.txt),
I see there are several dependencies, but there isn't PCRE.

Fixes: 936a48a ("czmq: add new package")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e3ab95185c)
2023-09-22 09:26:43 +02:00
Josef Schlehofer
1b0392321d msmtp: update to version 1.8.24
Release notes:
ef62463e4dX

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 29a9a6a4a7)
2023-09-22 00:30:15 +02:00
Bernd Kuhls
0f4911e06e libdrm: install all headers
include/libdrm/drm.h and others headers are needed to build libva.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
(cherry picked from commit cb8c0ba6c0)
2023-09-21 10:03:20 +02:00
Tianling Shen
f575287c75 rclone: Update to 1.63.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 34d1c310b3)
2023-09-20 11:02:29 +08:00
Lucian Cristian
b27e3f16d8 libreswan: update to 4.9
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit a707fcc88d)
2023-09-20 00:24:21 +02:00
Lucian Cristian
fdb4f5f1b5 libreswan: update to 4.7
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 8cf8518a08)
2023-09-20 00:24:14 +02:00
Sergey V. Lobanov
fc30fb720d libreswan: fix build on macos
libreswan makefile detects macos (darwin) and changes build logic
but OpenWrt is always Linux so it is required to specify linux as
target platfrom

This patch specifies Linux as a target platfrom

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
(cherry picked from commit 270e8eabc3)
2023-09-20 00:23:38 +02:00
Šimon Bořek
98a7ee05fe python-sentry-sdk: update to 1.5.4
changelog: f6d3adcb3d/CHANGELOG.md (154)

Signed-off-by: Šimon Bořek <borek@autobakterie.cz>
(cherry picked from commit 32e2a2fa2a)
2023-09-16 12:30:37 +02:00
Olivier Poitrey
a3456dbb97 nextdns: Update to version 1.40.1
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2023-09-16 17:02:33 +08:00
Josef Schlehofer
27dad3cdd3 syslog-ng: update to version 4.3.1
Makefile changes:
- Since version 4.3.0, there is required to use pcre2 instead of pcre
Reference: https://github.com/syslog-ng/syslog-ng/pull/4537

- Disable c++ support by default to avoid picking libstdcpp dependency
Reference: https://github.com/syslog-ng/syslog-ng/pull/4484

Config changes:
- Bump version in config file

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c43599b0c8)
2023-09-15 09:31:34 +02:00
Jeffery To
4f5cce5be4 python3: Update to 3.9.18
Includes fix for CVE-2023-40217 (Bypass TLS handshake on closed
sockets).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-09-08 19:02:09 +08:00
Moritz Warning
cbb6e7d5bd zerotier: update to 1.12.1
* split up "fix makefile" patch logical distinct parts
* add libatomic dependency needed for prometheus-cpp-lite-1.0
* refresh patch series
* improve warning message in init script

Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit 6cf39ba626)
2023-09-04 14:30:47 +08:00
Oskari Rauta
4d498fa65b zerotier: do not allow executable stack
zerotier as default has executable stack.
[   11.343143] process '/usr/bin/zerotier-one' started with executable stack

executable stacks are not recommend, possibly provide a threat and there
seems to be no advantage of executable stack with zerotier-one - so let's
build it without instead.

Stack is executable on x86_64, but not on all archs, such as ramips.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 56f30520f2)
2023-09-04 14:30:47 +08:00
Moritz Warning
3e09917f36 zerotier: update to 1.10.4
Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit b5cde91594)
2023-09-04 14:30:47 +08:00
Moritz Warning
171749f02d zerotier: update to 1.10.3
Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit 1af4a404a5)
2023-09-04 14:30:47 +08:00
Josef Schlehofer
e901f555fb knot-resolver: update to version 5.7.0
Changelog:
https://www.knot-resolver.cz/2023-01-26-knot-resolver-5.6.0.html
https://www.knot-resolver.cz/2023-08-22-knot-resolver-5.7.0.html

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit a531468114)
2023-09-03 10:04:02 +02:00
Sergey V. Lobanov
5423228148 tcl: fix build on macos
configure script detects Darwin and uses flags incompatible with
Linux target build.

This patch uses fakeuname tool if host OS is MacOS to avoid Darwin
detection on target build.

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
(cherry picked from commit 6e9c701050)
2023-09-02 15:50:14 +02:00
Sergey V. Lobanov
8554a287cf stress-ng: fix build on macos
This patch adds KERNEL=Linux to MAKE_FLAGS to avod Darwin detection.
If Makefile detects Darwin, it removes -lbsd from build flags, but
this flag is required due to target is always Linux, not bsd-like.

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
(cherry picked from commit 53a51fb3d1)
2023-09-02 15:49:06 +02:00
Sergey V. Lobanov
84b66ce125 syslog-ng: fix build on macos
configure script detects Darwin and uses flags incompatible with
Linux target build.

This patch uses fakeuname tool if host OS is MacOS to avoid Darwin
detection on target build.

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
(cherry picked from commit 0a9a52ee77)
2023-09-02 15:45:46 +02:00
Sergey V. Lobanov
dc10003c5e fakeuname: add package
This package provides fakeuname host tool to avoid build platform
detection for invalid configure/build scripts that are not
friendly to cross-platform build.

This fake uname tool returns Linux as OS name and target Linux
version as OS version.

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
(cherry picked from commit 4b6fc857be)
2023-09-02 15:44:32 +02:00
Michael Heimpold
b3a6bb8390 Merge pull request #21815 from mhei/21.02-php8-update-to-8.0.30
[21.02] php8: update to 8.0.30
2023-08-15 07:40:22 +02:00
Michael Heimpold
e76e8296ec php8: update to 8.0.30
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2023-08-13 11:47:04 +02:00
Tianling Shen
90e30040c8 yq: Update to 4.34.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1cb2590c17)
2023-07-16 03:17:42 +08:00
Tianling Shen
ec90d11d44 yq: Update to 4.34.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2ecf76e27d)
2023-07-16 03:17:39 +08:00
Tianling Shen
07d85984d4 rclone: Update to 1.63.0
While at it fixed a typo error of license files variable.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 952844c976)
2023-07-16 03:17:07 +08:00
Tianling Shen
d0aa4c3f7a rclone: Update to 1.62.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 392a68e247)
2023-07-16 03:17:03 +08:00
Noah Meyerhans
8df2214472 bind: bump to 9.18.16
Fixes CVEs:

- CVE-2023-2828: The overmem cleaning process has been improved, to
  prevent the cache from significantly exceeding the configured
  max-cache-size limit.
- CVE-2023-2911: A query that prioritizes stale data over lookup
  triggers a fetch to refresh the stale data in cache. If the fetch is
  aborted for exceeding the recursion quota, it was possible for named
  to enter an infinite callback loop and crash due to stack overflow.

The complete list of changes is available in the upstream release
notes at
https://ftp.isc.org/isc/bind9/cur/9.18/doc/arm/html/notes.html#notes-for-bind-9-18-16

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit 9ac79ad469)
2023-06-25 21:37:51 -07:00
Michael Heimpold
19d5e96d35 Merge pull request #21397 from mhei/21.02-php8-update-to-8.0.29
[21.02] php8: update to 8.0.29
2023-06-20 08:01:29 +02:00
Michael Heimpold
0d98cdb6bf php8: update to 8.0.29
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2023-06-15 21:27:59 +02:00
Tianling Shen
0ba2e15c61 Merge pull request #21347 from jefferyto/python-3.9.17-openwrt-21.02
[openwrt-21.02] python3: Update to 3.9.17
2023-06-13 11:00:45 +08:00
Jeffery To
5661564a57 python3: Update to 3.9.17
This includes an updated patch for pip, as the bundled pip was also
updated with this release.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2023-06-12 16:17:50 +08:00
Hirokazu MORIKAWA
33f24874df avahi: Import patches for security fixes
Imported patches included in debian and other package.

* 200-Fix-NULL-pointer-crashes-from-175.patch
  CVE-2021-3502
   A flaw was found in avahi 0.8-5. A reachable assertion is present in avahi_s_host_name_resolver_start function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this vulnerability is to the service availability.

* 201-Avoid-infinite-loop-in-avahi-daemon-by-handling-HUP-event.patch
  CVE-2021-3468
   A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the client_work function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is to the availability of the avahi service, which becomes unresponsive after this flaw is triggered.

* 202-avahi_dns_packet_consume_uint32-fix-potential-undefined-b.patch
   avahi_dns_packet_consume_uint32 left shifts uint8_t values by 8, 16 and 24 bits to combine them into a 32-bit value. This produces an undefined behavior warning with gcc -fsanitize when fed input values of 128 or 255 however in testing no actual unexpected behavior occurs in practice and the 32-bit uint32_t is always correctly produced as the final value is immediately stored into a uint32_t and the compiler appears to handle this "correctly".
Cast the intermediate values to uint32_t to prevent this warning and ensure the intended result is explicit.

* 203-Do-not-disable-timeout-cleanup-on-watch-cleanup.patch
   This was causing timeouts to never be removed from the linked list that tracks them, resulting in both memory and CPU usage to grow larger over time.

* 204-Emit-error-if-requested-service-is-not-found.patch
   It currently just crashes instead of replying with error. Check return
value and emit error instead of passing NULL pointer to reply.

* 205-conf-file-line-lengths.patch
   Allow avahi-daemon.conf file to have lines longer than 256 characters (new limit 1024).

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 779af4d40c)
2023-06-11 13:39:18 +08:00
Toke Høiland-Jørgensen
50875d6789 net/acme: Bump acme.sh to v3.0.6
Important security fix.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2023-06-09 19:56:10 +02:00
Glenn Strauss
984dad6b0b lighttpd: update to lighttpd 1.4.71 release hash
remove patches included upstream

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 19291ee195)
2023-05-28 15:43:14 +03:00
W. Michael Petullo
e34d15a3eb syslog-ng: update to 4.2.0
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 1fcea07981)
2023-05-28 08:06:21 +02:00
Alexandru Ardelean
8e2881eab3 Merge pull request #21185 from commodo/django-update-21.09
[21.02] django: bump to version 3.2.19
2023-05-27 21:15:32 +03:00
Alexandru Ardelean
17f8c876bf django: bump to version 3.2.19
Fixes CVE-2023-31047
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-31047

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2023-05-26 13:17:58 +03:00
Rafał Miłecki
36ba94fcda wsdd2: fix stopping service
Function start_service() is called whenever service may need reloading.
If SMB server is not running it could be simply because it has been
stopped. Reloading service in such case is not an error so:
1. Don't log error as it isn't one
2. Don't exit with error code as it was confusing procd

This change fixes scenario like:
/etc/init.d/ksmbd stop
/etc/init.d/wsdd2 reload
(previously above wasn't stopping wsdd2)

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
(cherry picked from commit 6020ca52bf)
2023-05-21 10:21:13 +02:00
Li Zhang
2884d1072c wsdd2: Remove extra comma, which breaks the key-value pair of the '-b' parameter
Signed-off-by: Li Zhang <starsunyzl@gmail.com>
(cherry picked from commit 5fc06d939f)
2023-05-21 10:20:53 +02:00
Fritz D. Ansel
4a479d4118 wsdd2: dont use fqdn
workgroups use the name of the host without domain

Signed-off-by: Fritz D. Ansel <fdansel@yandex.ru>
(cherry picked from commit 3953ff956d)
2023-05-21 10:20:53 +02:00
Rafał Miłecki
550965cce6 lxc: set --with-runtime-path to the /var/run path
The default runtime directory used by LXC is /run which doesn't exist
in OpenWrt. It causes errors like:

Failed to create lock for foo
lxc-create: foo: tools/lxc_create.c: main: 260 Failed to create lxc container

There has been workaround for that in the lxc-auto.init but it requires
installing "lxc-auto" package. Replacing that "ln -s" workaround with
Makefile specifying --with-runtime-path allows using pure "lxc" in
OpenWrt (without the "lxc-auto").

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
(cherry picked from commit 90fef036fe)
2023-05-19 17:48:03 +02:00
Marc Benoit
ac57ec2dd8 lxc-auto: made init script compatible with image builder
Signed-off-by: Marc Benoit <marcb62185@gmail.com>
(cherry picked from commit e70844a9ca)
2023-05-19 17:46:13 +02:00
John Audia
828d92bd76 lxc: update to 4.10.12
Bump to latest upstream release and rebase:
  010-Remove-distro-check.patch
  025-remove-unsupported-option.patch

After updating ran `make package/lxc/refresh` to clean dirty patches

Build system: x86_64
Build-tested: bcm2711/RPi4B
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <graysky@archlinux.us>
(cherry picked from commit 115bf07f6c)
2023-05-19 17:46:13 +02:00
John Audia
7d373e0fcb lxc-auto: step by 1 sec up to $max_timeout
If the user defines a $max_timeout of 30, the service will wait 30 seconds
before it considers lxc-stop complete even though lxc-stop might actually
finish much sooner.  This introduces an unneeded delay.

This commit changes the behavior to check once per second to see when lxc-stop
actually stops doing so up to $max_timeout.  It also slightly simplifies the
code with logic to append the -t $max_timeout to the script.

Signed-off-by: John Audia <graysky@archlinux.us>
(cherry picked from commit 7984d2d74a)
2023-05-19 17:46:13 +02:00
Jan Hák
b881d3dc90 knot: update to version 3.2.6
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit bb946a19cd)
2023-05-18 07:22:43 +02:00
Jan Hák
f51047ea19 knot: update to version 3.2.5
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 94512aba16)
2023-05-18 07:22:35 +02:00
Josef Schlehofer
e823a6dee8 syslog-ng: update to version 4.1.1
- Release notes:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.1.1

- Updated version in config

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 7de98324c7)
2023-05-18 07:19:58 +02:00
Glenn Strauss
96bf440dd2 lighttpd: QUILT patches; fix build patches
QUILT patches; fix build patches to re-merge deprecated modules

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2023-05-15 18:12:03 +08:00
Glenn Strauss
526b9d9880 lighttpd: include mod_h2 in base package
The next version of lighttpd will move HTTP/2 support from the lighttpd
base executable into a separate module: mod_h2

Include patch to do so now, and update packaging to handle it.

HTTP/2 support is enabled by default since lighttpd 1.4.59, but if
HTTP/2 support is explicitly disabled in the configuration, then mod_h2
will not be loaded, thereby reducing lighttpd memory use.

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit f4152fccad)
2023-05-15 18:12:03 +08:00
Glenn Strauss
61bc2c5572 lighttpd: update to lighttpd 1.4.70 release hash
remove patches included upstream

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 0d5b110077)
2023-05-15 18:12:03 +08:00
Glenn Strauss
93f8972595 lighttpd: adjust packages for built-in modules
(.so is no longer built, but package still contains config files)

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 7fda9563de)
2023-05-15 18:12:03 +08:00
Glenn Strauss
4f88b07856 lighttpd: fix package DEPENDS syntax
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
Co-authored-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ae5135a913)
2023-05-15 18:12:03 +08:00
Tianling Shen
c6fc6dd635 librespeed-go: update file permissions for ujail
This fixes "permission denied" error when access files as a normal user.

Reported-by: Anya Lin <hukk1996@gmail.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 42d340bce0)
2023-04-29 14:29:05 +08:00
Javier Marcet
48242ee7a1 bind: disable geoip
Signed-off-by: Javier Marcet <javier@marcet.info>
[modified also PKG_RELEASE]
(cherry picked from commit 073ee02500)
2023-04-18 17:01:07 +02:00
Tianling Shen
299ad7a6dd Merge pull request #20799 from gstrauss/lighttpd-1.4.69-1-openwrt-21.02
lighttpd: update to lighttpd 1.4.69 release hash - backport to openwrt 21.02
2023-04-16 04:08:06 +08:00
Glenn Strauss
a10a509a00 lighttpd: patch to restore removed modules
patch to restore removed modules to preserve state for 21.02

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2023-04-14 17:14:35 -04:00
Hannu Nyman
9e95523374 ocserv: disable libmaxminddb detection
Disable libmaxminddb detection to fix a build error
due to missing dependency.
(the libmaxminddb library is now detected, but is unncessary.)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 508c4548dc)
2023-04-14 15:43:39 -04:00
Hannu Nyman
a46dc44589 knot: disable libmaxminddb detection
Disable libmaxminddb detection to fix a build error due to
missing dependency.
(the libmaxminddb library is now detected, but is unncessary.)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit ce46bf8a43)
2023-04-14 15:43:31 -04:00
Glenn Strauss
bea91ecd92 lighttpd: fix package DEPENDS syntax
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
Co-authored-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-04-14 15:21:16 -04:00
Rosen Penev
c7ae8c42f2 libmaxminddb: install pkgconfig file
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit fe018482f8)

(cherry pick reduced for backport)
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2023-04-14 15:18:46 -04:00
Glenn Strauss
1a8c25d221 lighttpd: update to lighttpd 1.4.69 release hash
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 8f2fbf093a)
2023-04-14 13:58:33 -04:00
Glenn Strauss
b6f0f40d7a lighttpd: add lighttpd-mod-webdav_min package
add lighttpd-mod-webdav_min package alternative to lighttpd-mod-webdav

lighttpd-mod-webdav_min is more minimal than full lighttpd-mod-webdav.
lighttpd-mod-webdav_min does not support PROPPATCH, LOCK, UNLOCK, and
by not supporting those methods, removes dependencies on libxml2,
libsqlite3, and libuuid.

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit ed6fe528c1)
2023-04-14 13:58:33 -04:00
Glenn Strauss
4659527c35 lighttpd: collect mods now built into lighttpd exe
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 85279b49ce)
2023-04-14 13:58:33 -04:00
Glenn Strauss
ee3febfc1c lighttpd: remove patch included upstream
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 66001d5a91)
2023-04-14 13:58:33 -04:00
Glenn Strauss
be5ea629de lighttpd: update to lighttpd 1.4.68 release hash
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 6383ae9407)
2023-04-14 13:58:33 -04:00
Glenn Strauss
3796a78aad lighttpd: modify build cmd for type: feature opts
modify build command for meson type: feature options

remove -Dwith_libev=disabled (option no longer has any effect)

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 4a3b62a92a)
2023-04-14 13:58:33 -04:00
Glenn Strauss
636616f4a6 lighttpd: add lighttpd-mod-rrdtool dep on rrdtool1
add lighttpd-mod-rrdtool dependency on rrdtool1

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 9f299e881b)
2023-04-14 13:58:33 -04:00
Glenn Strauss
d46d3bb761 lighttpd: lighttpd-1.4.67-4
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit a09dbfcf97)
2023-04-14 13:58:33 -04:00
Glenn Strauss
97197d5e94 lighttpd: document crypto lib options in Makefile
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 43741e748f)
2023-04-14 13:58:30 -04:00
Tianling Shen
8c6f6aefb4 v2raya: Update to 2.0.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 23e1348166)
2023-04-13 02:44:31 +08:00
Ryan Shi
fb673d64be rrdtool: update PKG_SOURCE_URL
Signed-off-by: Ryan Shi <qweaszxcdf@users.noreply.github.com>
(cherry picked from commit 164e0257e7)
2023-04-10 21:16:10 +03:00
Tianling Shen
0b7b12d707 yq: Update to 4.33.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0b255830e9)
2023-04-06 18:54:23 +08:00
Tianling Shen
bf18c8a4e8 yq: Update to 4.33.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e2cf4fa9a1)
2023-04-06 18:54:19 +08:00
Hannu Nyman
d726a7b007 nano: make nanorc world readable
If file /etc/nanorc is readable by everyone, "default" settings
are available for users as well without necessarily requiring
their own customized .nanorc in their home directory. Or if
they want one, but want it to be based on system's default
nanorc, they can copy it from /etc - without chmodding
file, it is in-accessible for users.

Suggested-by: Oskari Rauta <oskari.rauta@gmail.com>
[switched approach to use INSTALL_DATA]
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 76d02f933f)
2023-04-05 20:48:26 +03:00
Vladimir Ulrich
5a6a8c3d6f zoneinfo: Updated to the latest release
Signed-off-by: Vladimir Ulrich <admin@evl.su>
(cherry picked from commit 7259eea63f)
(cherry picked from commit 00f1c78a64)
(cherry picked from commit 453be8f179)
(cherry picked from commit 3185feda49)
(cherry picked from commit b15721d6d6)
(cherry picked from commit cb5bf2b007)
(cherry picked from commit 89c2fa9d9b)
(cherry picked from commit 8d693a79be)
(cherry picked from commit 5a9e8698c9)

Updated zoneinfo-all meta-package to fix warnings on build
Removed zoneinfo-simple from dependencies of zoneinfo-all as its contents are included in other packages.
(cherry picked from commit 1d88250815)

(cherry picked from commit 23e6200e4d)
(cherry picked from commit 0ff1a8666b)
2023-04-05 20:29:47 +03:00
Josef Schlehofer
cc5d4f7f82 unbound: update to version 1.17.1
- Refreshed one patch

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 97e69ec89c)
[Use AUTORELEASE]
2023-04-01 11:19:19 +02:00
Josef Schlehofer
663acbd379 ffmpeg: update to version 4.3.5
Fixes: CVE-2020-21041

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-04-01 11:04:53 +02:00
Tianling Shen
62e5089b5d v2raya: Update to 2.0.4
- Added TproxyNotSkipBr flag for OpenWrt.
- Removed all upstreamed patches.
- Removed deprecated option.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5062779dc7)
[removed nftables-related changes]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-03-21 18:50:02 +08:00
Tianling Shen
39c8d67ced yq: Update to 4.32.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 65dc683efe)
2023-03-21 01:34:12 +08:00
Florian Eckert
27ff0f1149 Merge pull request #20671 from TDT-AG/pr/20220415-openwrt-21.2-strongswan-cves
strongswan: backport CVE fixes
2023-03-17 16:29:32 +01:00
Florian Eckert
1ad16b7109 strongswan: bump PKG_RELEASE because of CVEs backports
CVE-2022-40617 45774858e8
CVE-2021-41990 05836ef668
CVE-2021-45079 e4d4e9dc48
CVE-2021-41991 d1bc776958

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-03-16 15:06:21 +01:00
Florian Eckert
45774858e8 strongswan: add fix for CVE-2022-40617
Full details of the CVE can be found at the following link:
https://www.strongswan.org/blog/2022/10/03/strongswan-vulnerability-(cve-2022-40617).html

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-03-16 08:08:34 +01:00
Florian Eckert
05836ef668 strongswan: add fix for CVE-2021-41990
Full details of the CVE can be found at the following link:
https://www.strongswan.org/blog/2021/10/18/strongswan-vulnerability-(cve-2021-41990).html

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-03-16 08:08:28 +01:00
Florian Eckert
e4d4e9dc48 strongswan: add fix for CVE-2021-45079
Full details of the CVE can be found at the following link:
https://www.strongswan.org/blog/2022/01/24/strongswan-vulnerability-(cve-2021-45079).html

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-03-16 08:08:22 +01:00
Florian Eckert
d1bc776958 strongswan: add fix for CVE-2021-41991
Full details of the CVE can be found at the following link:
https://www.strongswan.org/blog/2021/10/18/strongswan-vulnerability-(cve-2021-41991).html

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-03-16 08:08:17 +01:00
Michael Heimpold
b508e90afe Merge pull request #20667 from mhei/21.02-php8-update-to-8.0.28
[21.02] php8: update to 8.0.28
2023-03-16 07:30:35 +01:00
Michael Heimpold
3935ef65ea php8: update to 8.0.28
This fixes:
    - CVE-2023-0567
    - CVE-2023-0568
    - CVE-2023-0662

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2023-03-14 22:10:08 +01:00
Etienne Champetier
960ae0434e mv88e6xxx_dump: update to 2023.03.08
This fixes 2 issues where mv88e6xxx_dump was displaying
data incorrectly for --vtu and --global2

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 2bf3832193)
2023-03-12 11:28:42 +01:00
Etienne Champetier
18f242ada9 mv88e6xxx_dump: add new packages to debug switch issues
Reviewed-by: Chris Healy cphealy@gmail.com
Reviewed-by: Robert Marko <robimarko@gmail.com>
Reviewed-by: Andre Heider <a.heider@gmail.com>
Tested-by: Petr Štetiar <ynezz@true.cz>
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 167c6234d0)
2023-03-12 11:28:36 +01:00
Christian Marangi
006014745c ci: update github actions to v3
Update checkout and upload-artifact action to v3 to mute nodejs
deprecation warning.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 52570d4242)
2023-03-11 12:02:29 +01:00
Jeffery To
e328bb03ec ci: Use openwrt/gh-action-sdk@v5
The previous build errors with v5 have been fixed. This version builds
packages as a normal user instead of as root.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 37f9b77b01)
2023-03-11 12:02:29 +01:00
Jeffery To
6df650e909 golang: Fix conditionals not stripped
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 86fd1ebbe4)
2023-03-09 18:24:44 +01:00
Christian Lachner
8fac9fc114 haproxy: update to v2.2.29
- Update haproxy download URL and hash
- This release fixes a critial flaw known as CVE-2023-25725. See:
  http://git.haproxy.org/?p=haproxy-2.2.git;a=commit;h=4a4c90c2b04444d92c58873cfb19052f20280bc2

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2023-03-08 20:38:07 +08:00
Tianling Shen
477e23e85d v2raya: drop wrong patches
These patches should not be backported to OpenWrt, otherwise tproxy
won't work for devices connected to br-lan (bypassed by the fw rules).

We have introduced a new compile-time flag for new version (which
is not released yet), but it's unnecessray to backport redudant
patches as here is still at the old version.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 40669c4135)
2023-03-05 14:48:07 +08:00
Tianling Shen
41779b9804 yq: Update to 4.31.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1343bb5856)
2023-03-05 14:48:02 +08:00
Tianling Shen
48d54a6c92 yq: Update to 4.31.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b76bd94605)
2023-03-05 14:47:58 +08:00
Tianling Shen
8e8c8f3d6f msgpack-c: Update to 5.0.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5890d2f2d7)
2023-03-02 16:51:48 +08:00
Alan Swanson
a6abd3c010 sed: remove old libpcre dependency
Signed-off-by: Alan Swanson <reiver@improbability.net>
(cherry picked from commit 0a00f0f2a5)
2023-03-02 07:37:39 +01:00
Dengfeng Liu
98cb09953b xfrpc: update to version 2.1.606
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit db243b31c8)
2023-02-27 10:47:11 +08:00
Dengfeng Liu
4a1401a7f3 xfrpc: Update to 1.11.587
refactor tcp mux

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit 419c434002)
2023-02-27 10:47:11 +08:00
Dengfeng Liu
72cfe23545 xfrpc: allow server_addr ip and domain
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit a7e3f28c37)
2023-02-27 10:47:11 +08:00
Dengfeng Liu
bf9301311e xfrpc: Update to 1.07.582
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit 9fbd26f170)
2023-02-27 10:47:11 +08:00
Dengfeng Liu
f2b01b7b1b xfrpc: update to 1.06.579
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit 5615ce33fa)
2023-02-27 10:47:11 +08:00
Dengfeng Liu
557cfeb98b xfrpc: set xfrpc's disabled default value to 0
change this to satisfy luci-app-xfrpc's need

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit 10a24d4cad)
2023-02-27 10:47:11 +08:00
Dengfeng Liu
8f6d7e8885 xfrpc: fix bug of xfrpc.init
replace xfrpc with xfrp

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit b3bd24f1af)
2023-02-27 10:47:11 +08:00
Dengfeng Liu
5ef07ad955 xfrpc: update to 1.05.561
support tcp mux and default to turn it on

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit d4430d2e89)
2023-02-27 10:47:11 +08:00
Dengfeng Liu
b6e1d2b6e8 xfrpc: Update to 1.05.548
deprecated xfrps, compatible with frps

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit 2cb01429b1)
2023-02-27 10:47:11 +08:00
Dengfeng Liu
76b2528f6b xfrpc: fast reverve proxy client in c language
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit 9af01c87bf)
2023-02-27 10:47:11 +08:00
Michal Vasilek
90d8dc04be git: update to 2.34.7
Fixes CVE-2023-22490, CVE-2023-23946

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 06f466cc61)
2023-02-23 15:43:44 +01:00
Peter van Dijk
2a015d5fd7 CI: do not crash during PKG-INFO generation if there are no packages
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit b5132de5cf)
2023-02-23 11:56:03 +01:00
Peter van Dijk
b6e1446bee CI: add PKG-INFO metadata file
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit a40c1b3e44)
2023-02-23 11:56:03 +01:00
Peter van Dijk
c49acc1fd3 CI: use git commit sha in name
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit bbf983721c)
2023-02-23 11:56:03 +01:00
Eneas U de Queiroz
8c41503549 Merge pull request #20526 from nxhack/2102_node_14213
[21.02] node: bump to v14.21.3
2023-02-20 09:37:44 -03:00
Alexandru Ardelean
fae6120882 Merge pull request #20518 from commodo/django-21.02
[21.02] django: bump to version 3.2.18
2023-02-20 11:10:36 +02:00
Hirokazu MORIKAWA
d57b35fa83 node: bump to v14.21.3
Thursday February 16 2023 Security Releases

Notable Changes
The following CVEs are fixed in this release:
* CVE-2023-23918: Node.js Permissions policies can be bypassed via process.mainModule (High)
* CVE-2023-23920: Node.js insecure loading of ICU data through ICU_DATA environment variable (Low)
More detailed information on each of the vulnerabilities can be found in February 2023 Security Releases blog post.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2023-02-19 15:07:45 +09:00
Nick Hainke
ee193dffb4 snowflake: update to v2.5.1
Changes in version v2.4.3 - 2023-01-16
- Fix version number in version.go

(Changes for v2.5.1 are missing)

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit ac9027aebb)
2023-02-18 10:07:06 +01:00
Alexandru Ardelean
e7e30dfc8d django: bump to version 3.2.18
Fixes:
  https://nvd.nist.gov/vuln/detail/CVE-2023-23969

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2023-02-17 19:27:10 +02:00
Tianling Shen
f9a4173497 xray-core: Update to 1.7.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b4c4b17308)
[Updated geodata to latest version, based on 669357351c]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-02-14 06:38:35 +08:00
Noah Meyerhans
0e8b663fbc bind: update to 9.18.11
Fixes CVEs:
      - CVE-2022-3924: Fix serve-stale crash when recursive clients
      soft quota is reached.
      - CVE-2022-3736: Handle RRSIG lookups when serve-stale is
      active.
      - CVE-2022-3094: An UPDATE message flood could cause named to
      exhaust all available memory. This flaw was addressed by adding
      a new "update-quota" statement that controls the number of
      simultaneous UPDATE messages that can be processed or
      forwarded. The default is 100. A stats counter has been added to
      record events when the update quota is exceeded, and the XML and
      JSON statistics version numbers have been updated.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit 47fcec43ab)
2023-02-01 23:19:26 +01:00
Oskari Rauta
f8cfcab26c crun: update to 1.3
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 7034d3cbba)
2023-02-01 23:07:04 +01:00
Oskari Rauta
1579bb624e crun: update to version 1.2
release notes:

0.20.1
 - container: ignore error when resetting the SELinux label for the keyring.

0.21
 - when compiled with krun, automatically use it if the current executable file is called "krun"
 - cgroup: lookup pids controller as well when the memory controller is not available
 - status: add fields for owner and created timestamp
 - honor memory swappiness set to 0

1.0
 - Fix symlink target mangling for tmpcopyup targets.
 - Makefile.am: fix link error when using directly libcrun.
 - cgroup: add support for setting memory.use_hierarchy on cgroup v1.
 - linux: treat pidfd_open failures EINVAL as ESRCH.
 - cgroup: chown the current container cgroup to root in the container.

1.1
 - utils: retry openat2 on EAGAIN. If the openat2 syscall is interrupted, try again.
 - criu: fix save of external descriptors. Now restored containers attach correctly their standard streams.
 - criu: Add support for external PID namespace.
 - container: Set primary process to 1 via LISTEN_PID by default if user configuration is missing.
 - exec: refuse to exec in a paused container/cgroup.
 - cgroup: use cgroup.kill when available. It is faster to kill a container through its cgroup as there is no need to recurse over the cgroup pids and terminate each one of them.

1.2
 - criu: add support for external ipc, uts and time namespaces.
 - exec: fix regression in 1.1 where containers are being wrongly reported as paused.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 3873a850a5)
2023-02-01 23:06:36 +01:00
Oskari Rauta
7d78b97652 podman: update to v3.4.4
list of changes: https://github.com/containers/podman/releases

Added patch for compiling with musl. Patch can be removed on next
release as it is already merged to podman git but not on this release.
Patch moves definition in source so definition is available before it
is being used.

Patch source: https://github.com/containers/podman/pull/12564

Patch re-created with quilt.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 5ff3b25509)
2023-02-01 23:04:34 +01:00
Oskari Rauta
3b058e762d podman: update to 3.4.2
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit b011f3faf8)
2023-02-01 23:03:27 +01:00
Olivier Poitrey
6e4fb5bfb4 nextdns: Update to version 1.39.4
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2023-01-28 06:38:25 +08:00
Rafał Miłecki
a7a3615681 ksmbd: select ASN1 explicitly to reduce dependencies
ksmbd requires ASN.1 grammar compiler so it depends on CONFIG_ASN1. It
should select kmod-asn1-decoder for above reason.

Due to some problems with kmod-asn1-decoder in the past ksmbd was
selecting kmod-nf-nathelper-extra instead. That was affecting network
performance in kernel as each loaded conntrack module adds some overhead
to packets processing.

Fix this unwanted side effect by depending on kmod-asn1-decoder
directly.

Link: http://lists.openwrt.org/pipermail/openwrt-devel/2023-January/040298.html
Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
2023-01-27 11:29:47 +01:00
Dirk Brenken
de41f9a0d9 Merge pull request #20406 from realizelol/openwrt-21.02
[21.02] banip: renew tor urls
2023-01-27 11:19:47 +01:00
Chris
b08549f9eb banip: renew tor urls as previous ones were death.
Signed-off-by: Chris Schulten <bsw.bsw@gmx.de>
2023-01-27 10:58:06 +01:00
Jan Hák
3e8cc5d1b6 knot: update to version 3.2.4
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit c933a15ceb)
2023-01-26 18:34:04 +01:00
Jan Hák
428c554329 knot: update to version 3.2.3
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 4370e457c8)
2023-01-26 18:34:00 +01:00
Jan Hák
650ffc592e knot: update to version 3.2.2
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit a5913d51c7)
2023-01-26 18:33:56 +01:00
Michael Heimpold
e6b36ce4a3 Merge pull request #20270 from mhei/21.02-php8-update-8.0.27
[21.02] php8: update to 8.0.27
2023-01-22 23:51:56 +01:00
Hannu Nyman
a3e312f7ea Merge pull request #20358 from hnyman/rtty2102
Rtty2102
2023-01-21 22:09:37 +02:00
Josef Schlehofer
5f977fe36b atlas-sw-probe: add more binaries
They were added in these commits [1] [2] and if they are not included,
the RIPE Atlas SW Probe does not work correctly.

This should also prevent this from happening in the future as it now. We include all
files with .sh extension file type.

[1] 70ced29fc3
[2] 71a4ff0e68

Fixes: https://github.com/openwrt/packages/issues/20338

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 1a368a5409)
2023-01-21 20:48:04 +01:00
Hannu Nyman
9c66f9c816 Merge pull request #20357 from hnyman/wifidog2102
[21.02] wifidog: fix compilation with more recent wolfssl
2023-01-21 21:37:18 +02:00
Hannu Nyman
ff9d4f70f5 Merge pull request #20356 from hnyman/libuhttpd2102
[21.02] fix libuhttpd
2023-01-21 21:30:18 +02:00
Jianhui Zhao
d247ca8ef2 rtty: update to 8.0.1
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit 0ea357c164)
(cherry picked from commit 8377e516e9)
2023-01-21 21:20:27 +02:00
Sergey V. Lobanov
cda7d2f24c rtty: add compatibility for wolfssl >= 5.0
NTRU support has been removed in wolfssl 5.0 so it is required to
mask NTRU specific code if wolfssl >= 5.0

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
(cherry picked from commit 9913c0899a)
2023-01-21 21:20:05 +02:00
Jianhui Zhao
38f9166dd6 rtty: update to 8.0.0
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit 12c5ed9a4c)
2023-01-21 21:19:54 +02:00
Jianhui Zhao
3a8278b25a rtty: update to 7.4.1
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit 110e24ad9c)
2023-01-21 21:19:36 +02:00
Jianhui Zhao
d39b7bf3a3 rtty: update to 7.4.0
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit a9a1d8740b)
2023-01-21 21:15:46 +02:00
Rosen Penev
ef25b82951 wifidog: fix compilation with more recent wolfssl
Needs an extra header. pthread.h is also no longer implicitly included.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4605f98b41)
2023-01-21 21:09:37 +02:00
Sergey V. Lobanov
b1a0002409 libuhttpd: add compatibility for wolfssl >= 5.0
NTRU support has been removed in wolfssl 5.0 so it is required to
mask NTRU specific code if wolfssl >= 5.0

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
(cherry picked from commit 9a9f26796b)
2023-01-21 20:55:52 +02:00
Rosen Penev
fd86eba029 libuhttp: don't build examples
Speeds up compilation and potentially fixes it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 21e5a1e7d3)
2023-01-21 20:55:43 +02:00
Jianhui Zhao
4afb7633b7 libuhttpd: Update to 3.12.1
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit 4c163b0b12)
2023-01-21 20:55:34 +02:00
Jianhui Zhao
a76c1a8441 libuhttpd: Update to 3.12.0
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit 756d9e906b)
2023-01-21 20:55:25 +02:00
Jianhui Zhao
ae5a221a7b libuhttpd: Update to 3.11.0
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit 3aa128f007)
2023-01-21 20:55:14 +02:00
Jianhui Zhao
2c2d58e521 libuhttpd: Update to 3.10.1
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit 20328691d3)
2023-01-21 20:55:04 +02:00
Jianhui Zhao
bfa450bbc8 libuhttpd: Update to 3.10.0
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit a5fbbb9970)
2023-01-21 20:54:56 +02:00
Jianhui Zhao
2e3216e0bd libuhttpd: Update to 3.9.0
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
(cherry picked from commit 696d5021da)
2023-01-21 20:54:43 +02:00
Hannu Nyman
f396f23812 nano: update to 7.2
Update nano editor to version 7.2.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 6a3d2386fa)
2023-01-21 12:21:36 +02:00
Huangbin Zhan
14e931d153 bash: update to 5.1.16
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
(cherry picked from commit 15c6fa3ddd)
2023-01-19 19:52:31 +01:00
Huangbin Zhan
7b263a9a07 bash: add /etc/profile.d/sys_bashrc.sh as conffile
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
(cherry picked from commit 2977360e46)
2023-01-19 19:52:26 +01:00
Rosen Penev
26d94664d2 bash: update to 5.1.8
Switch to AUTORELEASE for simplicity.

Remove upstream backports.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 069f1a80b6)
2023-01-19 19:52:08 +01:00
Philip Prindeville
6c65d0fa2e bash: fixing missing PARAMS() macro in strtod.c
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit fd9012836a)
2023-01-19 19:52:03 +01:00
Michal Vasilek
6054221b42 git: update to 2.34.6
Fixes CVE-2022-23521
Fixes CVE-2022-41903
Fixes CVE-2022-39260
Fixes CVE-2022-39253
Fixes CVE-2022-29187

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 96e8ff604f)
2023-01-19 19:28:04 +01:00
Tianling Shen
f74757054a xray-core: Update to 1.7.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 65ccc4c913)
2023-01-18 18:29:36 +08:00
Tianling Shen
ee0aaf768c yq: Update to 4.30.8
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 99d6d25bb5)
2023-01-18 18:27:57 +08:00
Tianling Shen
c0df3146d5 yq: Update to 4.30.7
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 3c34ef4c99)
2023-01-18 18:27:53 +08:00
Nick Hainke
f3a759049e snowflake: update to 2.4.2
Changes in version v2.4.2 - 2023-01-13
- Issue 40208: Enhance help info for capacity flag
- Issue 40232: Update README and fix help output
- Issue 40173: Increase clientIDAddrMapCapacity
- Issue 40177: Manually unlock mutex in ClientMap.SendQueue
- Issue 40177: Have SnowflakeClientConn implement io.WriterTo
- Issue 40179: Reduce turbotunnel queueSize from 2048 to 512
- Issue 40187/40199: Take ownership of buffer in QueuePacketConn QueueIncoming/WriteTo
- Add more tests for URL encoded IPs (safelog)
- Fix server flag name
- Issue 40200: Use multiple parallel KCP state machines in the server
- Add a num-turbotunnel server transport option
- Issue: 40241: Switch default proxy STUN server to stun.l.google.com

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 5435ddb8f8)
2023-01-17 23:53:57 +01:00
ValdikSS ValdikSS
328faede56 miredo: add miredo.conf conffile
Keep miredo.conf modified configuration upon upgrades

Signed-off-by: ValdikSS ValdikSS <iam@valdikss.org.ru>
(cherry picked from commit 95acb627f4)
2023-01-17 23:53:32 +01:00
Josef Schlehofer
490f3d672e atlas-sw-probe: update to version 5080
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 12fd3cfe1e)
2023-01-16 11:13:05 +01:00
Rosen Penev
4d05f96f2a atlas-probe: update to 2.6.3
Switch to git tarballs.

Remove upstreamed patches and add OpenSSL patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3eace67a30)
2023-01-15 13:08:11 +01:00
Tianling Shen
53570cfead golang: Update to 1.18.10
go1.18.10 (released 2023-01-10) includes fixes to cgo, the compiler,
the linker, and the crypto/x509, net/http, and syscall packages.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-01-14 15:02:49 +08:00
Michael Heimpold
0c7dc100de php8: update to 8.0.27
This fixes:
    - CVE-2022-31631

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2023-01-11 22:14:59 +01:00
Tianling Shen
88b0e30806 libtorrent-rasterbar: Update to 2.0.8
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 991c2d452c)
2023-01-06 16:38:11 +08:00
Philip Prindeville
56c120b067 bind: update to version 9.18.10
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit 07f528b331)
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2022-12-28 11:20:52 -08:00
Josef Schlehofer
6690f9cf7d Merge pull request #20168 from 1715173329/my/2102-adg
[openwrt-21.02] adguardhome: update to v0.107.21
2022-12-28 11:49:18 +01:00
Josef Schlehofer
8f742e6221 Merge pull request #20155 from paper42/libarchive-cve-21
[21.02] libarchive: update to 3.5.3, fix CVE-2022-36227
2022-12-28 11:47:15 +01:00
Tianling Shen
9d25ce73e8 xray-core: Update to 1.7.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 9a7926339b)
[Updated geodata to latest version, based on ea969a117a]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-12-28 12:59:17 +08:00
Tianling Shen
a588eaa195 rclone: Update to 1.61.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 822d44e8f8)
2022-12-28 12:58:31 +08:00
Tianling Shen
08931a9a32 xray-core: Update to 1.6.6-2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4afc17e6e0)
2022-12-28 12:58:27 +08:00
Tianling Shen
4c4777b2a0 yq: Update to 4.30.6
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 071e97949f)
2022-12-28 12:58:23 +08:00
Hirokazu MORIKAWA
f01f54e34e node: bump to v14.21.2
Notable changes
* CVE-2022-43548: DNS rebinding in --inspect via invalid octal IP address (Medium)
* OpenSSL 1.1.1s
* Root certificates updated to NSS 3.85
* Time zone update to 2022f

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-12-25 08:03:22 +08:00
YiZhen Choo
35758ed71d AdGuardHome: update to v0.107.21
Signed-off-by: YiZhen Choo <yizhen.c02@gmail.com>
(cherry picked from commit 60ae1e5637)
2022-12-24 10:52:52 +08:00
Dobroslaw Kijowski
474fba3ebe adguardhome: bump to 0.107.18
* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.17
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.18

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
(cherry picked from commit e3dc753781)
2022-12-24 10:52:49 +08:00
James White
95749ee269 adguardhome: Increase init start value to avoid network race conditions
Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit cd4c7b3ac3)
2022-12-24 10:52:36 +08:00
YiZhen Choo
c6807daf88 AdGuardHome: update to v0.107.16
Signed-off-by: YiZhen Choo <yizhen.c02@gmail.com>
(cherry picked from commit 64dabe2d68)
2022-12-24 10:52:30 +08:00
YiZhen Choo
a2b0b02d56 AdGuardHome: update to v0.107.12
Signed-off-by: YiZhen Choo <yizhen.c02@gmail.com>
(cherry picked from commit e806d85e46)
2022-12-24 10:52:26 +08:00
YiZhen Choo
b2c369c202 AdGuardHome: update to v0.107.11
Signed-off-by: YiZhen Choo <yizhen.c02@gmail.com>
(cherry picked from commit 79acc3c21f)
2022-12-24 10:52:23 +08:00
Michal Vasilek
b7c7fdb5bc libarchive: add missing CONFLICT
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-12-22 14:36:00 +01:00
Michal Vasilek
07bcdaf4fe libarchive: fix CVE-2022-36227
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-12-22 11:40:58 +01:00
Michal Vasilek
522c606212 libarchive: update to 3.5.3
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-12-22 11:22:05 +01:00
Rosen Penev
e466253cb2 libarchive: update to 3.5.2
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 537f743c49)

rebased to remove AUTORELEASE
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-12-22 11:21:31 +01:00
Alexandru Ardelean
c542d7ed17 Merge pull request #20144 from turris-cz/openwrt-21.02/python3-update
[21.02] python3: update to version 3.9.16
2022-12-21 19:53:26 +02:00
Josef Schlehofer
53e4788542 python3: update to version 3.9.16
Release notes:
https://www.python.org/downloads/release/python-3916/

Fixes:
CVE-2022-43680
CVE-2022-37454
CVE-2022-45061
CVE-2022-42919
CVE-2015-20107

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-12-21 00:03:19 +01:00
Daniel Golle
1ea5d7b856 snowflake: update to version 2.4.1
Changes in version v2.4.1 - 2022-12-01
 - Issue 40224: Bug fix in utls roundtripper

Changes in version v2.4.0 - 2022-11-29
 - Fix proxy command line help output
 - Issue 40123: Reduce multicast DNS candidates
 - Add ICE ephemeral ports range setting
 - Reformat using Go 1.19
 - Update CI tests to include latest and minimum Go versions
 - Issue 40184: Use fixed unit for bandwidth logging
 - Update gorilla/websocket to v1.5.0
 - Issue 40175: Server performance improvements
 - Issue 40183: Change snowflake proxy log verbosity
 - Issue 40117: Display proxy NAT type in logs
 - Issue 40198: Add a `orport-srcaddr` server transport option
 - Add gofmt output to CI test
 - Issue 40185:  Change bandwidth type from int to int64 to prevent overflow
 - Add version output support to snowflake
 - Issue 40229: Change regexes for ipv6 addresses to catch url-encoded addresses
 - Issue 40220: Close stale connections in standalone proxy

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit f60f11f927)
2022-12-18 21:01:14 +01:00
Michal Vasilek
168981c7a6 apr-util: disable parallel build
Build reliably fails with -j20

    crypto/apr_passwd.c:200:1: fatal error: error closing -: Broken pipe
      200 | }
          | ^
    compilation terminated.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit bd9e119d68)
2022-12-16 20:48:47 -08:00
Hannu Nyman
c618a62862 nano: update to 7.1
Update nano editor to version 7.1
* drop the backported upstream fix for 7.0
* drop AUTORELEASE
* disable justify from 'plus'. Rarely needed with OpenWrt

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 89dc1b17e9)
2022-12-15 17:58:02 +02:00
Luiz Angelo Daros de Luca
373e06019f ruby: update to 3.0.5
This release includes a security fix.

- CVE-2021-33621: HTTP response splitting in CGI

For more details:
- https://www.ruby-lang.org/en/news/2022/11/24/ruby-3-0-5-released/

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2022-12-12 23:31:58 +01:00
Josef Schlehofer
61c74e161d Merge pull request #20038 from 1715173329/g1189
[openwrt-21.02] golang: Update to 1.18.9
2022-12-09 11:53:45 +01:00
Alois Klink
c10f3e369e github-ci: error on any shell errors
Enable `errexit` and `nounset` [POSIX shell options][1]
in `.github/workflows/entrypoint.sh` so that the script fails
if any command within the script fails.

[1]: https://pubs.opengroup.org/onlinepubs/9699919799//utilities/V3_chap02.html#set

Reported-by: Marius Dinu <m95d+git@psihoexpert.ro>
Fixes: https://github.com/openwrt/packages/issues/19953
Signed-off-by: Alois Klink <alois@aloisklink.com>
(cherry picked from commit 18d3c529fa)
2022-12-08 10:56:16 +01:00
Daniel Golle
522d181e28 snowflake: update to version 2.3.1
03b2b56f Fix broker race condition
 36f03dfd Record proxy type for proxy relay stats

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 15fdb5fa16)
2022-12-08 09:13:54 +01:00
Josef Schlehofer
7fc7829410 Merge pull request #19445 from PolynomialDivision/21-02-snowflake
[21.02] snowflake: add package
2022-12-07 22:08:42 +01:00
Tianling Shen
622c060f04 golang: Update to 1.18.9
go1.18.9 (released 2022-12-06) includes security fixes to the net/http
and os packages, as well as bug fixes to cgo, the compiler, the runtime,
and the crypto/x509 and os/exec packages.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-12-08 01:40:26 +08:00
Alexandru Ardelean
1c73006889 django: reset PKG_RELEASE to 1
Omitted during review.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-12-07 10:01:51 +02:00
Alexandru Ardelean
cf525c6cf9 Merge pull request #20034 from peter-stadler/openwrt-21.02
django: bump version 3.2.16
2022-12-07 09:55:58 +02:00
Liangbin Lian
a18ed04325 samba4: support both user map and valid users on same time
Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
(cherry picked from commit e04e523a01)
2022-12-07 06:56:10 +08:00
Peter Stadler
70e59ae9c4 django: bump version 3.2.16
fix CVE-2022-41323

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2022-12-06 22:55:38 +01:00
Josef Schlehofer
347e16e3ed Merge pull request #19997 from TDT-AG/pr/owrt-21.02-fix-libqmi-build
libqmi: fix build regressions
2022-12-04 18:46:50 +01:00
Maxim Anisimov
6b711dfe67 libqmi: bump to 1.30.8
Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
(cherry picked from commit 0b0d8163d5)
2022-12-02 11:39:42 +01:00
Aleksander Morgado
aa97efc453 libqmi: bump to 1.30.6
Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit 45e8d072ee)
(cherry picked from commit b8a8dd53c7)
2022-12-02 11:39:42 +01:00
Maxim Anisimov
7508755357 libqmi: polish Makefile
PKG_VERSION replaced by PKG_SOURCE_VERSION.
Simplify for collection selection.
Removed unneeded python3/host dep.

Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
(cherry picked from commit ff5837ee8f)
(cherry picked from commit 94b824423b)
2022-12-02 11:39:42 +01:00
Maxim Anisimov
1b61e53162 libqmi: switch to meson build tools
Using https://gitlab.freedesktop.org/mobile-broadband/libqmi.git to download the source code.
Enabled lto and additional gcc flags for perfomance and less size.
Added support for selecting qmi message collection.
Selected basic qmi message collection by default (modemmanager requires it).
Modified to use meson as upstream has abandoned autotools.
Removed BUILD_PARALLEL options. These are default with ninja/meson.

Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
(cherry picked from commit f7cbd44540)
(cherry picked from commit 1683d7c963)

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Update meson include dir for branch openwrt-21.02.
2022-12-02 11:39:13 +01:00
Florian Eckert
fc08a8dd9e Revert "libqmi: bump to 1.30.8"
The libqmi version 1.30.8 uses meson. In order to cherry-pick the
last changes cleanly, this commit must first be reverted.

This reverts commit 0cccbcb0c7.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-12-02 11:36:29 +01:00
Glenn Strauss
c5923a41a4 lighttpd: lighttpd.conf vars, comments, guidance
lighttpd.conf variables, documentation comments, configuration guidance

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit c862b524fb)
2022-12-02 10:00:02 +01:00
Glenn Strauss
3db5bead98 lighttpd: print stderr trace if validation fails
lighttpd.init validate_conf(): print stderr trace if validation fails

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 38ffa02e42)
2022-12-02 09:59:57 +01:00
Tianling Shen
556d2c56e9 v2raya: backports upstream fixes and add 3 new options
It may take a long time waiting for a new tag, so backport these
important bug fixes for now.

While at it, added 3 new options provided by upstream, and deprecated
the usage of `$(AUTORELEASE)`.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 17362ce57c)
2022-12-01 01:47:05 +08:00
Tianling Shen
8661649848 xray-core: Update to 1.6.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b3e453f335)
[updated geodata, based on 664ecae4e6]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-12-01 01:46:22 +08:00
Tianling Shen
7e36fba083 yq: Update to 4.30.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 255d19a007)
2022-12-01 01:45:29 +08:00
Peter Stadler
41989cb074 uwsgi: bump version and use less workarounds
* adopt pypi name and line numbers in patches
* remove custom tar command and patch for using python3 (changed upstream)

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
(cherry picked from commit 545629e386)
2022-11-30 18:13:35 +01:00
Tianling Shen
5186a6d7cb librespeed-go: add new package
Go backend for LibreSpeed.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a157e382df)
2022-11-28 23:22:36 +01:00
Maxim Anisimov
2e35f82f11 libmbim: switch to meson build tools
Using https://gitlab.freedesktop.org/mobile-broadband/libmbim.git to download the source code.
Enabled lto and additional gcc flags for perfomance and less size.
Modified to use meson as upstream has abandoned autotools.
Removed BUILD_PARALLEL options. These are default with ninja/meson.

Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
(cherry picked from commit fea19c2399)
2022-11-28 23:20:24 +01:00
Tianling Shen
b062c3a001 sqlite3: Update to 3.40.0
1. Added a new option for SQLITE3_COLUMN_METADATA.
2. Minor cleanup Makefile and fixed 2 typo errors.

Fixes: CVE-2022-35737

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a4a0f0793b)
2022-11-25 18:28:57 +08:00
Marius Dinu
52a8b4fcd3 sqlite: update to v3.37 (2021-11-27)
Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
(cherry picked from commit b2309dc25e)
2022-11-25 18:28:52 +08:00
Jan Hoffmann
f67e32b5cc sqlite3: add option for batch-atomic write support
This allows to build SQLite with support for the batch-atomic write
optimization. It makes use of atomic write support provided by the
underlying file system. Currently, this is only supported on F2FS. It
it does not work with overlayfs.

Signed-off-by: Jan Hoffmann <jan@3e8.eu>
(cherry picked from commit 4bc7ba7fe8)
2022-11-25 18:28:41 +08:00
Josef Schlehofer
f5c810b90b libmbim: fix hash for 1.26.4 tarball
This corrects the hash by using sha256sum for downloaded tarball from
freedesktop. After that, package libmbim was successfully compiled.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-11-23 14:31:56 +01:00
Ivan Pavlov
c84b8ec897 xtables-addons: update to 3.21
updated to kernel 5.10.121+ changes

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
(cherry picked from commit 69e4ed4b6f)
2022-11-23 09:50:53 +01:00
Nick Hainke
ae2500ca61 xtables-addons: update to 3.20
866bc7f Xtables-addons 3.20
aa70669 doc: move changelog to rST
d7de2a9 doc: remove old changelog entries
d7e49a8 build: bump supported kernel version to 5.17
966fa43 extensions: replace PDE_DATA

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit c3141dc16a)
2022-11-23 09:50:49 +01:00
Eneas U de Queiroz
742d047e01 audit: remove host build
The audit package in the packages feed share the same sources as the
libaudit package in the base repo.  libaudit performs a host build, used
only by libsemanage in base.

There is no package depending on 'audit/host', so we can remove it to
avoid possible confusion.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 1d54defb0f)
2022-11-22 14:29:53 +01:00
Eneas U de Queiroz
03f871f305 audit: avoid interferece with base libaudit build
Both audit in the packages feed and libaudito from the base repo use the
same sources.

Have 'audit' use a different build directory than 'libaudit' package to
avoid interference between them.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit c0f26f4980)
2022-11-22 14:29:44 +01:00
Aleksander Morgado
a44fbba8a2 libmbim: bump to 1.26.4
Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit 1d2ef5abbb)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[only version bump]
2022-11-22 14:19:50 +01:00
Eric Luehrsen
63dbfa5608 unbound: update to 1.17.0
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry picked from commit 6bc0293a73)
(cherry picked from commit 0de8e969e3)
2022-11-22 14:09:17 +01:00
Josef Schlehofer
4d253075cb unbound: update to version 1.16.3
Changelog: https://www.nlnetlabs.nl/projects/unbound/download/#unbound-1-16-3
- Fixes: CVE-2022-3204

Refreshed one patch

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 027533f9a2)
(cherry picked from commit a9423d8946)
2022-11-22 14:09:12 +01:00
Pascal Ernster
33a584fb59 unbound: update to 1.16.2, fix CVE-2022-30698, CVE-2022-30699
Maintainer: @EricLuehrsen
Compile tested: x86/64
Run tested: x86/64
Description: Update to 1.16.2, fix CVE-2022-30698 and CVE-2022-30699.

Signed-off-by: Pascal Ernster <git@hardfalcon.net>
(cherry picked from commit 2179432991)
(cherry picked from commit eaefde9a4a)
2022-11-22 14:09:07 +01:00
Pascal Ernster
d2ab505a65 unbound: update to 1.16.1
Maintainer: @EricLuehrsen
Compile tested: realtek/rtl838x, x86/64
Run tested: realtek/rtl838x, x86/64
Description: Update to 1.16.1

Signed-off-by: Pascal Ernster <git@hardfalcon.net>
(cherry picked from commit e702a66058)
(cherry picked from commit 2e878763df)
2022-11-22 14:09:02 +01:00
Tianling Shen
7af662cc82 ooniprobe: Update to 3.16.5
Fix build with Go 1.19.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1c6570dcc7)
2022-11-22 14:08:21 +01:00
Michal Vasilek
da4024204a librespeed-cli: rename binary to librespeed-cli
upstream names the binary librespeed-cli and this avoids a conflict with
python3-speedtest-cli

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit c2ad338b0f)
2022-11-22 14:39:38 +08:00
Tianling Shen
d30605ece3 rclone: Update to 1.60.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 88a1535d00)
2022-11-22 14:39:33 +08:00
Tianling Shen
f3de9d8b69 xray-core: Update to 1.6.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d36c34f984)
2022-11-21 19:04:03 +08:00
Michal Vasilek
804cac0171 librespeed-cli: add package
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit bb33b55354)
2022-11-21 10:26:23 +01:00
Marc Benoit
ef16908da7 nextdns: initialize nextdns from /etc/uci-defaults
Signed-off-by: Marc Benoit <marcb62185@gmail.com>
(cherry picked from commit e54247a6fa)
2022-11-21 02:20:08 +08:00
Olivier Poitrey
3ecfd00e02 nextdns: Update to version 1.38.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2022-11-20 09:09:06 +08:00
Hannu Nyman
8f73afe660 nano: update to 7.0
Update nano to version 7.0.

Add a patch to fix the plus variant.
Upstream discussion and patch in
https://savannah.gnu.org/bugs/?63372

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 4a89a577a7)
2022-11-18 20:30:00 +02:00
van waholtz
e0dc2ef478 ariang: update to 1.3.2
Signed-off-by: van waholtz <brvphoenix@gmail.com>
(cherry picked from commit 99315b516f)
2022-11-17 14:54:47 -08:00
Van Waholtz
49d586c736 ariang: update to 1.2.4
Changelog: https://github.com/mayswind/AriaNg/releases

Signed-off-by: Van Waholtz <vanwaholtz@gmail.com>
(cherry picked from commit aee5b7db55)
2022-11-17 14:54:47 -08:00
Rosen Penev
a67c1f3dea ariang: update to 1.2.3
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4a400ed105)
2022-11-17 14:54:47 -08:00
Van Waholtz
d2bb9d9cc5 ariang: update to 1.2.2
Signed-off-by: Van Waholtz <vanwaholtz@gmail.com>
(cherry picked from commit ae09a31ffe)
2022-11-17 14:54:47 -08:00
Van Waholtz
e2bfb4bc92 ariang: update to 1.2.1
Use original main repo's releases instead

Signed-off-by: Van Waholtz <vanwaholtz@gmail.com>
(cherry picked from commit 3bcab30f20)
2022-11-17 14:54:47 -08:00
Tianling Shen
71914a1742 yq: Update to 4.30.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8762261112)
2022-11-17 17:54:03 +08:00
Michael Heimpold
e83faecb25 Merge pull request #19914 from mhei/21.02-php8-update-8.0.25
[21.02] php8: update to 8.0.25
2022-11-17 08:07:47 +01:00
Michael Heimpold
4c457b2e66 Merge pull request #19913 from mhei/21.02-php7-update-7.4.33
[21.02] php7: update to 7.4.33
2022-11-17 08:07:33 +01:00
Josef Schlehofer
ecedd96fbf Merge pull request #19648 from nemesisdesign/openwrt-21.02
[21.02] Backport fixes for modem-manager and its dependencies
2022-11-16 21:48:31 +01:00
Michael Heimpold
6e6c444638 php7: update to 7.4.33
This fixes:
    - CVE-2022-31630
    - CVE-2022-37454

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-11-16 15:31:56 +01:00
Michael Heimpold
223d461275 php8: update to 8.0.25
This fixes:
    - CVE-2022-31630
    - CVE-2022-37454

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-11-16 15:30:09 +01:00
Moritz Warning
9883948b58 zerotier: update to 1.10.2
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-11-15 14:35:06 +08:00
Moritz Warning
21f2df0881 zerotier: update to 1.10.1
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-11-15 14:35:06 +08:00
Moritz Warning
d9727496b5 zerotier: update to 1.8.9
Replace patch with Makefile options
to disable Rust components that
cannot be build with OpenWrt.

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-11-15 14:35:06 +08:00
Moritz Warning
2d1bc4aa9a zerotier: fix segfault on ARM platforms
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-11-15 14:35:06 +08:00
Moritz Warning
e1bc87354e zerotier: update to 1.8.8
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-11-15 14:35:06 +08:00
Moritz Warning
6825848905 zerotier: update to 1.8.6
* remove upstreamed gcc10 and cerrno patches
* disable SSO and OIDC as it needs Rust/Cargo support

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-11-15 14:35:06 +08:00
Tianling Shen
1f1536ca20 yq: Update to 4.30.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4d667ec8e8)
2022-11-14 22:21:16 +08:00
Tianling Shen
daf3fab7b2 yq: Update to 4.30.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2cba6e5f73)
2022-11-14 22:21:12 +08:00
Tianling Shen
b45c3deae9 treewide: fix procd service inactive
Exit directly will result procd service inactive and uci
configuration changes are no longer monitored.

Reported-by: Lvc Revincx <revincx233@gmail.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b1651c5d54)
2022-11-13 23:10:06 +08:00
Tianling Shen
73fdd5701a v2raya: Update to 1.5.9.1698.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 3c43f65ae9)
2022-11-13 23:09:41 +08:00
Tianling Shen
2619b4dc1e v2raya: Update to 1.5.8.1
1. Switched to use prebuilt web files to get rid of massive Node.js.
2. Increased nofile limitation to avoid "too many open files" error.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d629a6f8b2)
2022-11-13 23:09:36 +08:00
Tianling Shen
5bec58203f v2rayA: Update to 1.5.7
- Removed an upstreamed patch
- Move logs to /var/log in accordance with FHS 3.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ff8f25cb98)
2022-11-13 23:09:30 +08:00
Tianling Shen
06ff8383bc v2raya: fix panic in go 1.18
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 7aa127e208)
2022-11-13 23:09:24 +08:00
Tianling Shen
d52b6e2f17 v2rayA: Update to 1.5.6.2
Manually added new env variable `XDG_DATA_HOME` which won't be passed
by procd by default.

Removed upstreamed patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c7b5e7ed67)
2022-11-13 23:09:19 +08:00
Tianling Shen
21f7aef991 v2raya: init: convert arguments into env variables
Suggested by upstream, to provide forward compatibility.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8465053a58)
2022-11-13 23:09:14 +08:00
Tianling Shen
28b5968ab5 v2rayA: Update to 1.5.5
Breaking changes:
The database has been replaced with boltdb to try to solve the problem
of database corruption.

Note that the data will not be migrated, but the previous data will be
retained. If you need the previous data, just downgrade v2rayA (v1.5.4).

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 21e98e952f)
2022-11-13 23:09:10 +08:00
Tianling Shen
07a54c6a86 v2raya: Update to 1.5.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d48b22fb90)
2022-11-13 23:09:08 +08:00
Tianling Shen
20bfd00c35 v2raya: Update to 1.5.3
- Added missing conffiles
- Refreshed init srcipt to adapt the new arguments
- Renamed package name to lowercase (suggestion from upstream)
- Updated dependencies and license

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 16e453e4ac)
2022-11-13 23:08:56 +08:00
Tianling Shen
6bca9cc98e v2rayA: Update to 1.5.2
Refreshed init script to adapt new arguments accepted by the program.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 60c917089f)
2022-11-13 23:08:41 +08:00
Tianling Shen
e56960b81e v2rayA: add new package
v2rayA is a Linux web GUI client of Project V which supports V2Ray,
Xray, Shadowsocks, ShadowsocksR, Trojan and Pingtunnel.

Wiki: https://github.com/v2rayA/v2rayA/wiki

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 90ec599f9e)
2022-11-13 23:08:33 +08:00
Tianling Shen
11d3b49514 xray-core: Update to 1.6.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4194268e3f)
[Update geodata to latest version, based on e5c3c3409]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-11-12 18:49:13 +02:00
Tianling Shen
68426efcd8 xray-core: Update to 1.6.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e606ea7e78)
2022-11-12 18:49:13 +02:00
Tianling Shen
ead837f1cc xray-core: Update to 1.6.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b16b07409f)
2022-11-12 18:49:13 +02:00
Tianling Shen
ee096621de xray-core: Update to 1.6.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a0126b15c5)
[Update geodata to latest version, based on f8c25627eb]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 05d1265cb7)
2022-11-12 18:49:13 +02:00
Tianling Shen
ee4565763e xray-core: Update to 1.5.10
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ddd4082d30)
2022-11-12 18:49:13 +02:00
Jeffery To
5d660d0b6b syncthing: Update to 1.19.2
Includes patch based on upstream change[1] to fix compilation with Go
1.18.

Fixes https://github.com/openwrt/packages/issues/18267.

[1]: e30898ddb3

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 4b7ff2df5e)
(cherry picked from commit 961c73ca7c)
2022-11-10 12:33:56 +01:00
Josef Schlehofer
90b2aa9371 golang: update to version 1.18.8
Fixes following CVEs:
- CVE-2022-32189 (version 1.18.5 [1]]
- CVE-2022-27664 (version 1.18.6 [2])
- CVE-2022-32190 (version 1.18.6 [2])
- CVE-2022-2879 (version 1.18.7 [3])
- CVE-2022-2880 (version 1.18.7 [3])
- CVE-2022-41715 (version 1.18.7 [3])
- CVE-2022-41716 (version 1.18.8 [4])

and refreshed patch

[1] https://groups.google.com/g/golang-announce/c/YqYYG87xB10
[2] https://groups.google.com/g/golang-announce/c/x49AQzIVX-s
[3] https://groups.google.com/g/golang-announce/c/xtuG5faxtaU
[4] https://groups.google.com/g/golang-announce/c/mbHY1UY3BaM

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c33c2d8869)
2022-11-10 09:16:14 +01:00
Josef Schlehofer
b4c70db428 ffmpeg: libffmpeg-full package should provide libffmpeg package, too
The previous solution overwrote the provide from ``define
Package/libffmpeg/Default``, but that's not what was wanted.
Thus libffmpeg-full should provide three packages libffmpeg,
libffmpeg-mini and libffmpeg-audio-dec

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c333c0e522)
2022-11-09 15:13:12 +01:00
Jeffery To
aeeb0d7515 golang: Update to 1.18.4
Includes fixes for:

* CVE-2022-1705: net/http: improper sanitization of Transfer-Encoding
  header
* CVE-2022-1962: go/parser: stack exhaustion in all Parse* functions
* CVE-2022-28131: encoding/xml: stack exhaustion in Decoder.Skip
* CVE-2022-30630: io/fs: stack exhaustion in Glob
* CVE-2022-30631: compress/gzip: stack exhaustion in Reader.Read
* CVE-2022-30632: path/filepath: stack exhaustion in Glob
* CVE-2022-30633: encoding/xml: stack exhaustion in Unmarshal
* CVE-2022-30635: encoding/gob: stack exhaustion in Decoder.Decode
* CVE-2022-32148: net/http/httputil: NewSingleHostReverseProxy - omit
  X-Forwarded-For not working

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 60168651a2)
2022-11-09 14:46:06 +01:00
Jeffery To
2e6b8f0165 golang: Update to 1.18.3
Includes fix for CVE-2022-30634 (crypto/rand: Read hangs when passed
buffer larger than 1<<32 - 1).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 112cf09031)
2022-11-09 14:46:02 +01:00
Jeffery To
d53bb3ccc5 golang: Update to 1.18.2
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 659f87d5d4)
2022-11-09 14:45:58 +01:00
Jeffery To
a084693cf1 golang: Update to 1.18.1
Includes fixes for:
* CVE-2022-24675 - encoding/pem: stack overflow
* CVE-2022-28327 - crypto/elliptic: generic P-256 panic when scalar has
  too many leading zeroes

This also adds -buildvcs=false to omit VCS information in Go programs.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8c0477a895)
2022-11-09 14:45:54 +01:00
Jeffery To
2c9cc2c9fb golang: Update to 1.18, update patch
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 478666b00b)
2022-11-09 14:45:44 +01:00
Josef Schlehofer
6f98c3dba8 golang: update to version 1.17.13
Fixes:
CVE-2022-32189

Release notes:
https://groups.google.com/g/golang-announce/c/YqYYG87xB10?pli=1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-11-09 14:31:49 +01:00
Magnus Kessler
1a94de24a5 tailscale: update to version 1.24.2
Signed-off-by: Magnus Kessler <Magnus.Kessler@gmx.net>
(cherry picked from commit b557e9f0d1)
2022-11-07 12:48:21 +01:00
Wes Morgan
9e96244194 tailscale: update to 1.18.2
Signed-off-by: Wes Morgan <git@wesmorgan.me>
(cherry picked from commit efb908b032)
2022-11-07 12:47:45 +01:00
Josef Schlehofer
934831644d pulseadio: fix conffiles for pulseadio-daemon-avahi package
Fixes: 60ac7dd751 ("pulseaudio: simplify
and rework Makefile")

Reported-by: Hannu Nyman <hannu.nyman@iki.fi>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 7ae66ec7ca)
2022-11-05 21:22:11 +01:00
Josef Schlehofer
ae4c51d946 pulseaudio: change homepage URLs to freedesktop.org
The previous used domain http(s)://pulseaudio.org redirects to
https://www.freedesktop.org/wiki/Software/PulseAudio/

This change enforces to use HTTPS everywhere for homepage URLs

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 00e3918069)
2022-11-05 21:21:57 +01:00
Josef Schlehofer
d285ac95ad pulseaudio: use AUTORELEASE variable
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 364054fbe7)
2022-11-05 21:21:45 +01:00
Josef Schlehofer
c9f7d98c91 pulseaudio: daemons should conflict to each other
It should not be possible to install pulseaudio-daemon and
pulseadio-daemon-avahi at the same time as they have the same files.
Let's avoid that situation by adding conflict.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5a5bb15949)
2022-11-05 21:21:21 +01:00
Josef Schlehofer
f65a718a12 pulseaudio: simplify and rework Makefile
There were two conffiles sections and both of them were same, but for
different variants. We can have just one conffile section and use it also
for the other variant.

The same applies for the install section for different variants.
- We have two install sections, but we call the first one with the same
  files and then add something more for the second variant.

- While at it to make it easier, let's change those three rows for
  copying packages into the single one to make sure that I did not miss
anything. Also, we create a directory first and then move files.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 60ac7dd751)
2022-11-05 21:21:17 +01:00
Szabolcs Hubai
159944ac6c mpd: depend the full variant on pulseaudio instead of pulseaudio-daemon
The full variant of mpd depends on pulseaudio-daemon, so it was not
possible to use the other pulseaudio variant with avahi.

Both pulseaudio daemons provides package pulseaudio, so users can choose
which variant suits them best.
Let's change the dependency to pulseaudio.

Fixes: #19187
Fixes: 2ed62adc59 ("mpd: enable pulseaudio in full package")
Signed-off-by: Szabolcs Hubai <szab.hu@gmail.com>
(cherry picked from commit abe35e89f6)
2022-11-05 18:57:00 +01:00
Tianling Shen
02bf1fd5b3 rclone: Update to 1.60.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 90e037b5e5)
2022-11-03 20:27:12 -07:00
Tianling Shen
b89d0299bc yq: Update to 4.29.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d1f2b96b7e)
2022-11-03 20:27:00 -07:00
Scott Roberts
6711badf07 zabbix: add variants for SSL support
opkg does not offer ssl varients:
zabbix-agentd
zabbix-sender
zabbix-get
zabbix-proxy
zabbix-server

resolve this by adding ssl varients.

Signed-off-by: Scott Roberts <ttocsr@gmail.com>
(cherry picked from commit cd48d03f01)
(cherry picked from commit e0502e477c)
2022-11-01 11:02:21 +01:00
Rosen Penev
f90a7c92da coova-chili: fix compilation with kernel 5.10
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit eba4abb65d)
2022-10-29 11:59:21 +02:00
Rosen Penev
1c2258e95f ptunnel-ng: fix compilation with kernel 5.15
Some header change requires to include musl's headers first.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 468863128f)
2022-10-29 06:47:58 +02:00
Rosen Penev
1793655e61 libpfring: update to 8.0.0
Fixes compilation with kernel 5.15

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f8f2146b1b)
2022-10-29 06:45:23 +02:00
Rosen Penev
a91983bb2f coova-chilli: update to 1.6
Remove usptreamed patches.

Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c05077a499)
2022-10-29 06:40:47 +02:00
Rosen Penev
29cffa947d xtables-addons: update to 3.19
Fixes compilation with kernel 5.15.

Fixed changed binary name.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit e5af506795)
(cherry picked from commit 4a5633b6b5)
2022-10-29 05:57:55 +02:00
Josef Schlehofer
4f101b38b0 ffmpeg: add conflicts and provides
Motivation of this change is that full variants provides the mini
variant and as well audio-dec package, thus you can not install both as
it fails with the following output:

Collected errors:
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavcodec.so.58
	But that file is already provided by package  * libffmpeg-full
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavcodec.so.58.91.100
	But that file is already provided by package  * libffmpeg-full
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavdevice.so.58
	But that file is already provided by package  * libffmpeg-full
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavdevice.so.58.10.100
	But that file is already provided by package  * libffmpeg-full
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavformat.so.58
	But that file is already provided by package  * libffmpeg-full
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavformat.so.58.45.100
	But that file is already provided by package  * libffmpeg-full
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavutil.so.56
	But that file is already provided by package  * libffmpeg-full
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavutil.so.56.51.100
	But that file is already provided by package  * libffmpeg-full
 * opkg_install_cmd: Cannot install package libffmpeg-audio-dec.

Let's change it to:
Installing libffmpeg-audio-dec (4.3.4-1) to root...
Collected errors:
 * check_conflicts_for: The following packages conflict with libffmpeg-audio-dec:
 * check_conflicts_for:         libffmpeg-full *
 * opkg_install_cmd: Cannot install package libffmpeg-audio-dec.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 9693bd47c5)
2022-10-28 13:49:11 +02:00
Federico Capoano
0cccbcb0c7 libqmi: bump to 1.30.8
Signed-off-by: Federico Capoano <f.capoano@openwisp.io>
2022-10-27 13:48:21 -03:00
Florian Eckert
9d32d97c57 libqmi: remove unknown configure option
The configure option --enable-more-warnings is not recognized by
configure.

Buildlog:
configure: WARNING: unrecognized options: --disable-nls, --enable-more-warnings

Therefore this configure option is removed with this commit.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit a42f526b0c)
2022-10-27 13:48:21 -03:00
Kuan-Yi Li
463deb8e6d libqmi: bump to 1.30.4
Signed-off-by: Kuan-Yi Li <kyli@abysm.org>
(cherry picked from commit 244e1c7cfb)
2022-10-27 13:48:21 -03:00
Kuan-Yi Li
c75ecab4e0 libqmi: bump to 1.30.2
Signed-off-by: Kuan-Yi Li <kyli@abysm.org>
(cherry picked from commit 88895e362b)
2022-10-27 13:48:21 -03:00
Nicholas Smith
224d3d79ea libqmi: switch to autorelease
Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit daeb94469b)
2022-10-27 13:48:21 -03:00
Florian Eckert
c74f6610b0 libmbim: remove unknown configure option
The configure option --enable-more-warnings and --without-udev are not
recognized by configure.

Buildlog:
configure: WARNING: unrecognized options: --disable-nls,
--enable-more-warnings, --without-udev

Therefore this unkown configure options are removed with this commit.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit f0b5589ef0)
2022-10-27 13:48:21 -03:00
Kuan-Yi Li
8647937991 libmbim: bump to 1.26.2
Signed-off-by: Kuan-Yi Li <kyli@abysm.org>
(cherry picked from commit 89d6fc71e0)
2022-10-27 13:48:21 -03:00
Nicholas Smith
d66a61da62 libmbim: switch to autorelease
Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit 80b47a11b1)
2022-10-27 13:48:21 -03:00
Nicholas Smith
27a787c4e2 libmbim: bump to 1.26.0
Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit 46e6cb7d15)
2022-10-27 13:48:21 -03:00
Arkadiusz Drabczyk
f1a2e5b63d modemmanager: fix mm_log() invocations in 25-modemmanager* files
Definition of mm_log() was changed in
45a56a8899 but 25-modemmanager* weren't
changed.

Signed-off-by: Arkadiusz Drabczyk <arkadiusz@drabczyk.org>
(cherry picked from commit cdbc7a67fc)
2022-10-27 13:48:21 -03:00
Aleksander Morgado
a0c8f1028f modemmanager: explicitly disconnect even if no bearers found
A network restart where netifd is cleanly restarted involves bringing
the network interfaces down. The 'modemmanager' protocol handler will
run a mmcli --simple-disconnect in this case, but only if there are
bearer objects found.

If the network restart happened *during* the connection attempt
procedure, while the modem is e.g. being registered in the network, no
bearer objects exist yet, and so, we would skip doing anything during
the interface teardown operation. This would lead to the original
connection attempt succeeding, so leaving the modem in ModemManager
in connected state, while the associated interface in netifd is
reported down.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit c15e94f6c5)
2022-10-27 13:48:21 -03:00
Aleksander Morgado
9b502e8cb0 modemmanager: report network initiated disconnections to netifd
The new connection dispatcher scripts support integrated in
ModemManager 1.18.8 allows us to provide a openwrt-specific dispatcher
script used to report netifd that the underlying network connection is
down.

See also https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/merge_requests/775

Fixes https://github.com/openwrt/openwrt/issues/8368
Fixes https://github.com/openwrt/packages/issues/14096

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit bc754f31cf)
2022-10-27 13:48:21 -03:00
Aleksander Morgado
bbf6e99a41 modemmanager: install available FCC unlock scripts
The FCC unlock scripts are installed but not enabled by default.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit e430420aa1)
2022-10-27 13:48:21 -03:00
Federico Capoano
056ad9f504 modemmanager: bump to 1.18.12
Signed-off-by: Federico Capoano <f.capoano@openwisp.io>
2022-10-27 13:48:21 -03:00
Kuan-Yi Li
4616c35a9c modemmanager: bump to 1.18.6
Remove upstreamed patch.

Signed-off-by: Kuan-Yi Li <kyli@abysm.org>
(cherry picked from commit de9fce568b)
2022-10-27 13:48:21 -03:00
Nicholas Smith
7b0bd1eb0e modemmanager: bump to 1.18.4 with patch
The included patch corrects an issue preventing udev rules from
being parsed correctly. [1][2]

This patch should not be needed after the next release. [3]

More information:
[1] e9f254ba3f
[2] https://lists.freedesktop.org/archives/modemmanager-devel/2021-December/009024.html
[3] https://lists.freedesktop.org/archives/modemmanager-devel/2021-December/009022.html

Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit 8a878440bf)
2022-10-27 13:48:21 -03:00
Aleksander Morgado
cf0fd6ac27 modemmanager: remove 2s timeout before reporting cached events
When ModemManager is started on boot we may end up with hotplug events
reported directly to the daemon, plus some others already cached in
the cache file before the daemon was started.

If the cached events correspond to the same device that is still
notifying ports directly, we may end up with a modem object created
before the cached events have been emitted, so the modem may not
handle all control/data ports it should.

E.g.:

  - modem detected
  - hotplug event for wwan0 port, cached as MM not running
  - hotplug event for cdc-wdm0 port, cached as MM not running
  - hotplug event for ttyUSB0, cached as MM not running
  - MM starts
  - hotplug event for ttyUSB1, directly processed as MM is running
  - hotplug event for ttyUSB2, directly processed as MM is running
  - modem object created with ttyUSB1 and ttyUSB2
  - 2s after MM starts, cached events for wwan0, cdc-wdm0 and ttyUSB0
    happen, but are ignored because the modem object has already been
    created

MM expects that ports of the same device are reported with less than
1500ms in between ports. In other words, if ports are reported more
than 1500ms after the last reported port, they may get ignored.

If we remove the 2s timeout, the report of the cached events will
happen as soon as MM starts, which makes it much more likely to happen
in the timeslot that MM expects for ports of the same device reported.
The logic is still not perfect, and we may also need to increase that
1500ms timeout inside MM, but removing the 2s timeout right away here
makes sense.

This 2s timeout was introduced along with the new wrapper launcher for
the daemon, it didn't exist before.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit ab061c8ddd)
2022-10-27 13:48:21 -03:00
Florian Eckert
463110848f modemmanager: refactoring hotplug debug logging
The output of the hotplug is very chatty and floods the log with
messages that are not necessary in functioning operation.

So that the log can be filtered. A log level was added to each message
as the first opiton on mm_log function call.

In addition, the facility of the hotplug script has been set to daemon,
which in my view fits better than user.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 45a56a8899)
2022-10-27 13:48:21 -03:00
Florian Eckert
f0da4298ab ModemManager: add service options
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit dc7095baff)
2022-10-27 13:48:21 -03:00
Florian Eckert
4d8a723d92 ModemManager: refactoring procd init script
The way the init script is written now, we get a bad output when calling
the ubus service backend.

ubus call service list "{'verbose':true,'name':'modemmanager'}"
>{
>        "modemmanager": {
>                "instances": {
>                        "instance1": {
>                                "running": true,
>                                "pid": 20511,
>                                "command": [
>                                        "sh",
>                                        "-c",
>                                        ".
>/usr/share/ModemManager/modemmanager.common;    \t
>mkdir -m 0755 -p /var/run/modemmanager;          \t
>mm_cleanup_interfaces;                            \t
>( mm_report_events_from_cache ) >/dev/null 2>&1 & \t
>/usr/sbin/ModemManager"
>                                ],
>                                "term_timeout": 5,
>                                "respawn": {
>                                        "threshold": 3600,
>                                        "timeout": 5,
>                                        "retry": 5
>                                },
>                                "pidfile":"/var/run/modemmanager/modemmanager.pid"
>                        }
>                }
>        }
>}"

I also get the output in the log that the PID file cannot be created.

> daemon.err procd: Failed to remove pidfile: :No such file or directory

The changes in this commit fixes this issues, by moving startup into a
wrapper script.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 0b027b131c)
2022-10-27 13:48:21 -03:00
Aleksander Morgado
00a460e77e modemmanager: add support for wwan subsystem in hotplug
WWAN devices may now be exposed in the new 'wwan' subsystem in the
kernel (since 5.13), initially applicable to devices exposed in PCIe
(no USB), but at some point may also apply to USB devices that until
now were exposed via other subsystems (e.g. usbmisc, tty).

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit 2a31359c47)
2022-10-27 13:48:21 -03:00
Kuan-Yi Li
11cec09fc3 modemmanager: bump to 1.18.2
Signed-off-by: Kuan-Yi Li <kyli@abysm.org>
(cherry picked from commit 2937f0024b)
2022-10-27 13:48:20 -03:00
Nicholas Smith
bd215932a2 modemmanager: switch to autorelease
Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit c7ec9ec410)
2022-10-27 13:48:20 -03:00
Nicholas Smith
1f3488223c modemmanager: bump to 1.16.10
Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit 858d61b148)
2022-10-27 13:48:20 -03:00
Christian Marangi
18aa13a251 atlas-probe: fix SIGSEGV error on 32bit system
Changes to time_t cause SIGSEGV error on 32bit system and cause ripe
atlas malfunction. (registration successful but no traffic)
Also introduce minor patch to fix some compilation warning.

While at it move PKG_RELEASE to AUTORELEASE macro.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 14c5dfe4c1)
2022-10-27 16:04:15 +02:00
Josef Schlehofer
85b8f7c981 libwebsockets: fix recursive dependency
While running `make menuconfig`, it was discovered then there is a
recursive dependency like this:
tmp/.config-package.in:59138:error: recursive dependency detected!
tmp/.config-package.in:59138:	symbol PACKAGE_libwebsockets-openssl is selected by PACKAGE_libwebsockets-mbedtls
tmp/.config-package.in:59122:	symbol PACKAGE_libwebsockets-mbedtls depends on PACKAGE_libwebsockets-openssl

It is not possible with the recently added conflicts that two packages
(OpenSSL and full variant, which uses OpenSSL as well), which are almost the same
provides the same named package libwebsockets as their conflict - Mbed
TLS.

Fixes: 676c5c72b5 ("libwebsockets: OpenSSL
and mbedTLS variants should conflict")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit a4e8cbb89a)
2022-10-27 14:24:59 +02:00
Josef Schlehofer
1222d44448 libwebsockets: OpenSSL and mbedTLS variants should conflict
They provide the same files, but they don't conflict to each other, this
means that users can install them side by side.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 676c5c72b5)
2022-10-25 14:29:35 +02:00
Josef Schlehofer
19cb57bf12 libwebsockets: full variant provides OpenSSL
For some time, it is not possible to install ttyd and mosquitto-ssl at the
same time, so let's solve it that libwebsockets-full provides
libwebsockets-openssl. This allows to install ttyd and mosquitto at
the same time.

Also, we need to add conflict, because we should not have installed
libwebsockets-openssl and libwebsockets-full at the same time as they
provides the same files.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 77e682a11c)
2022-10-25 14:29:32 +02:00
Josef Schlehofer
480833d673 lighttpd: backport patch to fix dummy Sec-WebSocket-Key
It was requested in https://gitlab.nic.cz/turris/os/packages/-/issues/873

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit de49362d35)
2022-10-25 14:05:48 +02:00
Michal Hrusecky
fadd38f27d mariadb: Drop unused rundir fix socket dir perms
We had been creating "rundir" but it was never used, probably leftover
from some removed function. At the same time, we were setting quite
strict rights to the socket directory (while comments sugested
otherwise).

Signed-off-by: Michal Hrusecky <michal@hrusecky.net>
(cherry picked from commit 8f6831b64b)
2022-10-25 06:47:43 +02:00
Josef Schlehofer
a341405111 Merge pull request #19667 from miska/mariadb-21.02
[21.02] mariadb: Update to the latest version 10.4.26
2022-10-23 09:44:53 +02:00
Josef Schlehofer
f00b449d17 python3: update to version 3.9.15
Release notes:
- https://www.python.org/downloads/release/python-3915/

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-10-21 15:34:02 -07:00
Michal Hrusecky
eb2a5c0981 mariadb: Update to the latest version 10.4.26
Keeping the major version, bumping just a minor version. It includes
various bug fixes and security fixes.  For details, see:

* https://mariadb.com/kb/en/mariadb-10426-release-notes/
* https://mariadb.com/kb/en/mariadb-10425-release-notes/
* https://mariadb.com/kb/en/mariadb-10424-release-notes/
* https://mariadb.com/kb/en/mariadb-10423-release-notes/

While at it, also switching to AUTORELEASE and refreshing patches.

Signed-off-by: Michal Hrusecky <michal@hrusecky.net>
2022-10-21 23:55:50 +02:00
Michal Vasilek
d16d6e58d2 ddns-scripts: fix cloudflare&digitalocean provides
Fixes mistake in dbe79e409d, the
cloudflare PROVIDES got mixed up with digitalocean.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 001564ed83)
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Remove PKG_RELEASE version bump
2022-10-18 15:52:26 +02:00
Michal Vasilek
687e137335 ddns-scripts: add PROVIDES for old package names
* ddns-scripts-services: provide ddns-scripts_service
* ddns-scripts-cloudflare: provide ddns-scripts_digitalocean.com-v2
* ddns-scripts-freedns: provide ddns-scripts_freedns_42_pl
* ddns-scripts-godaddy: provide ddns-scripts_godaddy.com-v1
* ddns-scripts-noip: provide ddns-scripts_no-ip_com
* ddns-scripts-nsupdate: provide ddns-scripts_nsupdate
* ddns-scripts-route53: provide ddns-scripts_route53-v1
* ddns-scripts-cnkuai: provide ddns-scripts_cnkuai_cn

https://github.com/openwrt/packages/pull/13509 renamed many ddns-scripts
packages, but didn't include a PROVIDES for the old package names to
make updates work well.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit dbe79e409d)
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Remove PKG_RELEASE version bump
2022-10-18 13:39:22 +02:00
Michal Vasilek
db71747697 tailscale: fix -version
tailscale version, tailscaled -version and the web UI reported the wrong
version number which doesn't cause any issues, but it can be confusing.

This is fixed by specifying the version in go ldflags similar to how
it's done in many other go packages and the official tailscale Dockerfile.

version.Long version can not be specified in GO_PKG_LDFLAGS_X because it
contains a space and GO_PKG_LDFLAGS_X is always split at a space.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 738f44be4f)
2022-10-18 09:05:00 +02:00
Stijn Tintel
0b16e3f359 keepalived: fix build with IPVS disabled
The genhash binary is only built when IPVS is enabled, so make its
installation depend on IPVS being enabled.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 624d2278e7)
2022-10-15 14:23:39 +02:00
Florian Eckert
81af8d6703 keepalived: update to version 2.2.4
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 3f5b2d8cb3)
2022-10-15 14:23:15 +02:00
Florian Eckert
fba60ea134 keepalived: update to version 2.2.2
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit bdcb3d5905)
2022-10-15 14:23:09 +02:00
Daniel Golle
e3a168a838 postgresql: update to version 13.8
Update to 13.8 maintainance release of the PostgreSQL 13 release.
This release contains a variety of fixes from 13.7, among also a fix
addressing CVE-2022-2625.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-10-13 20:41:55 +01:00
Daniel Golle
d80638646f perl-net-dns: update to version 1.35
**** 1.35 Oct 4, 2022

    Improve SVCB error reporting.

Fix rt.cpan.org #144328
    accept_reply test fails with matched consecutive "random"
    generated packet->id

Fix rt.cpan.org #144299
    Spelling errors.

**** 1.34 May 30, 2022

    Improve robustness of EDNS option compose/decompose functions.
    Simplify code in Makefile.PL.

Fix rt.cpan.org #142426
    Avoid "Useless use of a constant in void context" warning.

**** 1.33 Dec 16, 2021
Fix rt.cpan.org #137768
    Test t/05-SVCB.t on Perl 5.18.0 fails with deep recursion.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 93a7806578)
(cherry picked from commit b9338331be)
2022-10-13 20:41:16 +01:00
Daniel Golle
63e359c3db pcsc-lite: update to version 1.9.8
1.9.8: Ludovic Rousseau
11 June 2022
- Install install_spy.sh & uninstall_spy.sh scripts in docdir
- SCardTransmit(): do not fail if receive buffer is "too large"
- SCardControl(): do not fail if receive buffer is "too large"
- fix some memory leaks on shutdown
- use a better random number generator
- Some other minor improvements

1.9.7: Ludovic Rousseau
13 May 2022
- disable strict compilation by default
- fix 3 warnings

1.9.6: Ludovic Rousseau
11 May 2022
- do not fail reader removal in some specific cases (USB/Thunderbolt port)
- improve documentation regarding /etc/reader.conf.d/
- SCardGetStatusChange: speedup the case DISABLE_AUTO_POWER_ON
- configure:
  . add --disable-strict option
   By default the compiler arguments are now:
   -Wall -Wextra -Wno-unused-parameter -Werror ${CFLAGS}
  . fail if flex is not found
- fix different data races
- pcscdaemon: -v displays internal constants values:
  MAX_READERNAME & PCSCLITE_MAX_READERS_CONTEXTS
- Some other minor improvements

1.9.5: Ludovic Rousseau 4 December 2021
 - pcscd: autoexit even if no client connects
 - Fix variable substitution in systemd units
 - fix potential race conditions with powerState handling
 - Add and use tag TAG_IFD_DEVICE_REMOVED
 - UnitaryTests: port code to Python 3

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 5c22f49175)
(cherry picked from commit db667b5b0f)

pcsc-lite: update to verion 1.9.9

 1.9.9: Ludovic Rousseau
 11 September 2022
  - SCardEstablishContext() may return SCARD_W_SECURITY_VIOLATION if refused by Polkit
  - Fix SCardReleaseContext() failure on orphan handles
  - Fix SCardDisconnect() on orphan handle
  - pcsc-spy: log the pioSendPci & pioRecvPci SCardTransmit() parameters
  - Improve the log from pcscd: log the return code in text instead of hex
  - Some other minor improvements

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit a8698d5ede)
2022-10-13 20:40:34 +01:00
Daniel Golle
dfd9236250 lvm2: update to 2.03.15
Version 2.03.15 - 07th February 2022
====================================
  Remove service based autoactivation. global/event_activation = 0 is NOOP.
  Improve support for metadata profiles for --type writecache.
  Use cache or active DM device when available with new kernels.
  Introduce function to utilize UUIDs from DM_DEVICE_LIST.
  Increase some hash table size to better support large device sets.

Version 2.03.16 - 18th May 2022
===============================
  Fix segfault when handling selection with historical LVs.
  Add support --vdosettings with lvcreate, lvconvert, lvchange.
  Filtering multipath devices respects blacklist setting from multipath
  configuration.
  lvmdevices support for removing by device id using --deviceidtype and
  --deldev.
  Display writecache block size with lvs -o writecache_block_size.
  Improve cachesettings description in man lvmcache.
  Fix lossing of delete message on thin-pool extension.

Mostly bug fixes and minor improvements.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 63408123df)
(cherry picked from commit 4e70f5caef)
2022-10-13 20:37:31 +01:00
Florian Eckert
8046d36f33 libudev-zero: update to version 1.0.1
The new version includes all previously locally backported patches.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 669e4a9542)
2022-10-13 20:37:21 +01:00
Daniel Golle
0039c8e637 libp11: update to version 0.4.12
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit d3b5074476)
2022-10-13 20:37:16 +01:00
Daniel Golle
4a5f0ea5b9 libksba: update to version 1.6.1
Update to stable release 1.6.1.
See commit log since version 1.6.0 for changes[1].

[1]: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git;a=shortlog;h=d3c1e063d708a46ef39152256f8b1ea466b61be0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit df589ce880)
2022-10-13 20:37:10 +01:00
Daniel Golle
41f615400a libinput: update to version 1.19.4
This release includes a fix for CVE-2022-1215, a format string
vulnerabilty in the evdev device handling. For details, see
https://gitlab.freedesktop.org/libinput/libinput/-/issues/752

Peter Hutterer (2):
      evdev: strip the device name of format directives
      libinput 1.19.4

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 23638c7ffb)
(cherry picked from commit b95dbe4187)
2022-10-13 20:36:38 +01:00
Daniel Golle
0daf580ff5 libevdev: update to version 1.13.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 630f5b1608)
2022-10-13 20:36:27 +01:00
Daniel Golle
48f44bcc58 gpgme: update to version 1.18.0
Noteworthy changes in version 1.17.0 (2022-02-07)
 -------------------------------------------------

 * New context flag "key-origin".  [#5733]
 * New context flag "import-filter".  [#5739]
 * New export mode to export secret subkeys.  [#5757]
 * Detect errors during the export of secret keys.  [#5766]
 * New function gpgme_op_receive_keys to import keys from a keyserver
   without first running a key listing.  [#5808]
 * Detect bad passphrase error in certificate import.  [T5713]
 * Allow setting --key-origin when importing keys.  [T5733]
 * Support components "keyboxd", "gpg-agent", "scdaemon", "dirmngr",
   "pinentry", and "socketdir" in gpgme_get_dirinfo.  [T5727,T5613]
 * Under Unix use poll(2) instead of select(2), when available.
   [T2385]
 * Do not use --flat_namespace when linking for macOS.  [T5610]
 * Fix results returned by gpgme_data_* functions.  [T5481]
 * Support closefrom also for glibc.  [rM4b64774b6d]
 * cpp,qt: Add support for export of secret keys and secret subkeys.
   [#5757]
 * cpp,qt: Support for adding existing subkeys to other keys.  [#5770]
 * qt: Extend ChangeExpiryJob to change expiration of primary key
   and of subkeys at the same time. [#4717]
 * qt: Expect UTF-8 on stderr on Windows.  [rM8fe1546282]
 * qt: Allow retrieving the default value of a config entry.  [T5515]

 Noteworthy changes in version 1.17.1 (2022-03-06)
 -------------------------------------------------

 * qt: Fix a bug in the ABI compatibility of 1.17.0.  [T5834]

 Noteworthy changes in version 1.18.0 (2022-08-10)
 -------------------------------------------------

 * New keylist mode to force refresh via external methods.  [T5951]
 * The keylist operations now create an import result to report the
   result of the locate keylist modes.  [T5951]
 * core: Return BAD_PASSPHRASE error code on symmetric decryption
   failure.  [T5939]
 * cpp, qt: Do not export internal symbols anymore.  [T5906]
 * cpp, qt: Support revocation of own OpenPGP keys.  [T5904]
 * qt: The file name of (signed and) encrypted data can now be set.  [T6056]
 * cpp, qt: Support setting the primary user ID.  [T5938]
 * python: Fix segv(NULL) when inspecting contect after exeception.  [T6060]

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit d7799595bd)
(cherry picked from commit 00bfb4f151)
2022-10-13 20:27:13 +01:00
Hauke Mehrtens
a471198392 gpgme: Fix compile with glibc 2.34
This backports a patch from upstream gpgme to fix compilation with glibc 2.34.

It fixes the following build problem:
posix-io.c: In function '_gpgme_io_spawn':
posix-io.c:577:23: error: void value not ignored as it ought to be
  577 |             while ((i = closefrom (fd)) && errno == EINTR)
      |                       ^
make[5]: *** [Makefile:947: posix-io.lo] Error 1

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit dafb96c148)
2022-10-13 20:27:03 +01:00
Daniel Golle
120bd98229 gawk: update to version 5.2.0
For changes see ChangeLog file[1].

[1]: https://git.savannah.gnu.org/cgit/gawk.git/plain/ChangeLog?h=gawk-5.2.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit cd20631bc7)
2022-10-13 20:26:58 +01:00
Daniel Golle
4c320b8a1e exfatprogs: update to 1.1.3
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 54b8e21fe7)
(cherry picked from commit 97e87c471c)
(cherry picked from commit b1585a5375)
(cherry picked from commit 3caf9ce16b)
2022-10-13 20:26:40 +01:00
Daniel Golle
5b1511daf1 exim: update to version 4.96
Exim version 4.96
-----------------

JH/01 Move the wait-for-next-tick (needed for unique message IDs) from
      after reception to before a subsequent reception.  This should
      mean slightly faster delivery, and also confirmation of reception
      to senders.

JH/02 Move from using the pcre library to pcre2.  The former is no longer
      being developed or supported (by the original developer).

JH/03 Constification work in the filters module required a major version
      bump for the local-scan API.  Specifically, the "headers_charset"
      global which is visible via the API is now const and may therefore
      not be modified by local-scan code.

JH/04 Fix ClamAV TCP use under FreeBSD. Previously the OS-specific shim for
      sendfile() didi not account for the way the ClamAV driver code called it.

JH/05 Bug 2819: speed up command-line messages being read in.  Previously a
      time check was being done for every character; replace that with one
      per buffer.

JH/06 Bug 2815: Fix ALPN sent by server under OpenSSL.  Previously the string
      sent was prefixed with a length byte.

JH/07 Change the SMTP feature name for pipelining connect to be compliant with
      RFC 5321.  Previously Dovecot (at least) would log errors during
      submission.

JH/08 Remove stripping of the binaries from the FreeBSD build.  This was added
      in 4.61 without a reason logged. Binaries will be bigger, which might
      matter on diskspace-constrained systems, but debug is easier.

JH/09 Fix macro-definition during "-be" expansion testing.  The move to
      write-protected store for macros had not accounted for these runtime
      additions; fix by removing this protection for "-be" mode.

JH/10 Convert all uses of select() to poll().  FreeBSD 12.2 was found to be
      handing out large-numbered file descriptors, violating the usual Unix
      assumption (and required by Posix) that the lowest possible number will be
      allocated by the kernel when a new one is needed.  In the daemon, and any
      child procesees, values higher than 1024 (being bigger than FD_SETSIZE)
      are not useable for FD_SET() [and hence select()] and overwrite the stack.
      Assorted crashes happen.

JH/11 Fix use of $sender_host_name in daemon process.  When used in certain
      main-section options or in a connect ACL, the value from the first ever
      connection was never replaced for subsequent connections.  Found by
      Wakko Warner.

JH/12 Bug 2838: Fix for i32lp64 hard-align platforms. Found for SPARC Linux,
      though only once PCRE2 was introduced: the memory accounting used under
      debug offset allocations by an int, giving a hard trap in early startup.
      Change to using a size_t.  Debug and fix by John Paul Adrian Glaubitz.

JH/13 Bug 2845: Fix handling of tls_require_ciphers for OpenSSL when a value
      with underbars is given.  The write-protection of configuration introduced
      in 4.95 trapped when normalisation was applied to an option not needing
      expansion action.

JH/14 Bug 1895: TLS: Deprecate RFC 5114 Diffie-Hellman parameters.

JH/15 Fix a resource leak in *BSD.  An off-by-one error resulted in the daemon
      failing to close the certificates directory, every hour or any time it
      was touched.

JH/16 Debugging initiated by an ACL control now continues through into routing
      and transport processes.  Previously debugging stopped any time Exim
      re-execs, or for processing a queued message.

JH/17 The "expand" debug selector now gives more detail, specifically on the
      result of expansion operators and items.

JH/18 Bug 2751: Fix include_directory in redirect routers.  Previously a
      bad comparison between the option value and the name of the file to
      be included was done, and a mismatch was wrongly identified.
      4.88 to 4.95 are affected.

JH/19 Support for Berkeley DB versions 1 and 2 is withdrawn.

JH/20 When built with NDBM for hints DB's check for nonexistence of a name
      supplied as the db file-pair basename.  Previously, if a directory
      path was given, for example via the autoreply "once" option, the DB
      file.pag and file.dir files would be created in that directory's
      parent.

JH/21 Remove the "allow_insecure_tainted_data" main config option and the
      "taint" log_selector.  These were previously deprecated.

JH/22 Fix static address-list lookups to properly return the matched item.
      Previously only the domain part was returned.

JH/23 Bug 2864: FreeBSD: fix transport hang after 4xx/5xx response. Previously
      the call into OpenSSL to send a TLS Close was being repeated; this
      resulted in the library waiting for the peer's Close.  If that was never
      sent we waited forever.  Fix by tracking send calls.

JH/24 The ${run} expansion item now expands its command string elements after
      splitting.  Previously it was before; the new ordering makes handling
      zero-length arguments simpler.  The old ordering can be obtained by
      appending a new option "preexpand", after a comma, to the "run".

JH/25 Taint-check exec arguments for transport-initiated external processes.
      Previously, tainted values could be used.  This affects "pipe", "lmtp" and
      "queryprogram" transport, transport-filter, and ETRN commands.
      The ${run} expansion is also affected: in "preexpand" mode no part of
      the command line may be tainted, in default mode the executable name
      may not be tainted.

JH/26 Fix CHUNKING on a continued-transport.  Previously the usabliility of
      the the facility was not passed across execs, and only the first message
      passed over a connection could use BDAT; any further ones using DATA.

JH/27 Support the PIPECONNECT facility in the smtp transport when the helo_data
      uses $sending_ip_address and an interface is specified.
      Previously any use of the local address in the EHLO name disabled
      PIPECONNECT, the common case being to use the rDNS of it.

JH/28 OpenSSL: fix transport-required OCSP stapling verification under session
      resumption. Previously verify failed because no certificate status is
      passed on the wire for the restarted session. Fix by using the recorded
      ocsp status of the stored session for the new connection.

JH/29 TLS resumption: the key for session lookup in the client now includes
      more info that a server could potentially use in configuring a TLS
      session, avoiding oferring mismatching sessions to such a server.
      Previously only the server IP was used.

JH/30 Fix string_copyn() for limit greater than actual string length.
      Previously the copied amount was the limit, which could result in a
      overlapping memcpy for newly allocated destination soon after a
      source string shorter than the limit.  Found/investigated  by KM.

JH/31 Bug 2886: GnuTLS: Do not free the cached creds on transport connection
      close; it may be needed for a subsequent connection.  This caused a
      SEGV on primary-MX defer.  Found/investigated by Gedalya & Andreas.

JH/32 Fix CHUNKING for a second message on a connection when the first was
      rejected.  Previously we did not reset the chunking-offered state, and
      erroneously rejected the BDAT command.  Investigation help from
      Jesse Hathaway.

JH/33 Fis ${srs_encode ...} to handle an empty sender address, now returning
      an empty address.  Previously the expansion returned an error.

HS/01 Bug 2855: Handle a v4mapped sender address given us by a frontending
      proxy.  Previously these were misparsed, leading to paniclog entries.

Also contains commit 51be321b27 "Fix PAM auth. Bug 2813" addressing
CVE-2022-37451.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit f2763b95af)
2022-10-13 20:26:18 +01:00
Daniel Golle
f1cd282c01 cryptsetup: update to version 2.5.0
Update to new major release of cryptsetup. For details, please see
the release notes[1].

[1]: https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.5/v2.5.0-ReleaseNotes
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 80439f802c)
2022-10-13 20:26:13 +01:00
Daniel Golle
e7bd06cc9a cryptsetup: fix library paths by calling autoreconf
Use PKG_FIXUP:=autoreconf when building cryptsetup to prevent
accidental linkage against host libraries.

Fixes: #19011
Reported-by: @dreirund
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit ad0ac5198d)
2022-10-13 20:26:08 +01:00
Daniel Golle
fb5b7e9cc7 ccid: update to version 1.5.0
1.5.0 - 27 January 2022, Ludovic Rousseau
   - Add support of
     - ACS ACR1281U
     - Circle CCR7125 ICC
     - Circle CIR125 ICC
     - Circle CIR125-DOT ICC
     - Circle CIR215 CL with iProduct 0x2100
     - Circle CIR315 DI
     - Circle CIR315 with idProduct: 0x0324
     - Circle CIR315 with idProduct: 0x7004
     - Circle CIR415 CL
     - Circle CIR515 ICC
     - Circle CIR615 CL
     - Circle CIR615 CL & 1S
     - ELYCTIS CL reader
     - Nitrokey Nitrokey 3
     - Thales Shield M4 Reader
   - Add support of simultaneous slot access on multi slots readers
   - Use FeliCa instead of Felica on SONY request
   - Fix SafeNet eToken 5110 SC issue
   - Allow vendor control commands for Omnikey 5427 CK
   - always compute readTimeout to use a value greater than default 3 seconds
   - Check the bSeq value when receiving a CCID frame
   - Avoid logging errors when a reader is removed
   - Some other minor improvements

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 0dd218a2fb)
2022-10-13 20:26:03 +01:00
Daniel Golle
b9dc5e5da7 auc: update to 0.3.1
Sync auc with main branch.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 6c9ab0e426)
(cherry picked from commit f1969ab584)
(cherry picked from commit 36525086ce)
(cherry picked from commit fd36c91db8)
2022-10-13 20:25:19 +01:00
Michal Vasilek
ed66ae5f08 python3: update to 3.9.14
* fixes CVE-2021-28861
* refresh patches

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-10-11 17:55:28 +02:00
Stan Grishin
dd9a7eb3b3 Merge pull request #19581 from stangri/openwrt-21.02-curl
[21.02] curl: error out if wolfSSL is not usable
2022-10-10 08:20:16 -07:00
Petr Štetiar
a1d76d41c3 curl: error out if wolfSSL is not usable
When we explicitly declare, that we would like to have curl built with
wolfSSL support using `--with-wolfssl` configure option, then we should
make sure, that we either endup with curl having that support, or it
shouldn't be available at all, otherwise we risk, that we end up with
regressions like following:

  configure:25299: checking for wolfSSL_Init in -lwolfssl
  configure:25321: x86_64-openwrt-linux-musl-gcc -o conftest [snip]
  In file included from target-x86_64_musl/usr/include/wolfssl/wolfcrypt/dsa.h:33,
                   from target-x86_64_musl/usr/include/wolfssl/wolfcrypt/asn_public.h:35,
                  from target-x86_64_musl/usr/include/wolfssl/ssl.h:35,
                   from conftest.c:47:
  target-x86_64_musl/usr/include/wolfssl/wolfcrypt/integer.h:37:14: fatal error: wolfssl/wolfcrypt/sp_int.h: No such file or directory
       #include <wolfssl/wolfcrypt/sp_int.h>
                ^~~~~~~~~~~~~~~~~~~~~~~~~~~~
  compilation terminated.

and in the end thus produce curl without https support:

 curl: (1) Protocol "https" not supported or disabled in libcurl

So fix it, by making the working wolfSSL mandatory and error out in
configure step when that's not the case:

 checking for wolfSSL_Init in -lwolfssl... no
 configure: error: --with-wolfssl but wolfSSL was not found or doesn't work

References: #19005, #19547
Upstream-Status: Accepted [https://github.com/curl/curl/pull/9682]
Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 9140f366ef)
2022-10-10 15:12:12 +00:00
Josef Schlehofer
110ff0b4cb Merge pull request #19569 from 1715173329/y2
[openwrt-21.02] yq: Update to 4.28.1
2022-10-09 21:37:09 +02:00
Tianling Shen
cee79fda43 yq: Update to 4.28.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 40f0e263bf)
2022-10-09 17:01:02 +08:00
Hirokazu MORIKAWA
82629531b7 node: bump to v14.20.1
The following CVEs are fixed in this release:
* CVE-2022-32212: DNS rebinding in --inspect on macOS (High)
* CVE-2022-32213: bypass via obs-fold mechanic (Medium)
* CVE-2022-35256: HTTP Request Smuggling Due to Incorrect Parsing of Header Fields (Medium)
More detailed information on each of the vulnerabilities can be found in September 22nd 2022 Security Releases blog post.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-10-08 06:16:28 +02:00
Stan Grishin
dfdc5c6fc9 Merge pull request #19548 from ynezz/ynezz/openwrt-21.02-fix-broken-libcurl
[21.02] fix broken libcurl by backporting curl: fix compilation with wolfSSL
2022-10-07 17:33:43 -07:00
Rosen Penev
f4cc6adcfe curl: fix compilation with wolfSSL
options.h header is needed after bump of libwolfssl to version 5.5.1,
otherwise libcurl autodetection for libwolfssl availability fails and
libcurl is then compiled without https support.

Fixes: #19547
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 317575755a)
(cherry picked from commit ef545e0317)
Signed-off-by: Petr Štetiar <ynezz@true.cz> [commit verbosity]
2022-10-07 14:23:46 +02:00
Petr Štetiar
5c73747ff6 Merge pull request #19536 from ynezz/ynezz/openwrt-21.02-wolfssl-CVE-2022-39173
[21.02] treewide: fix security issues by bumping all packages using libwolfssl
2022-10-06 13:34:38 +02:00
Eneas U de Queiroz
2d6bf3f6dd libgd: avoid recursive and redundant dependencies
Change the CONFLICTS line from the libgd-full to libgd to fix a
recursive dependency.

While at it, remove the redundant +LIBGD_TIFF:libtiff
+LIBGD_FREETYPE:libfreetype dependencies from Package/libgd/default.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 085eb34fbf)
2022-10-06 11:45:50 +02:00
Nick Hainke
415118b6b3 tor: update to 0.4.7.10
Release Notes:
https://forum.torproject.net/t/urgent-stable-release-0-4-5-14-0-4-6-12-and-0-4-7-10

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit b9cf0cdce6)
[fix commit title]
Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-10-05 23:31:28 +02:00
Petr Štetiar
c8447b8a38 treewide: fix security issues by bumping all packages using libwolfssl
As wolfSSL is having hard time maintaining ABI compatibility between
releases, we need to manually force rebuild of packages depending on
libwolfssl and thus force their upgrade. Otherwise due to the ABI
handling we would endup with possibly two libwolfssl libraries in the
system, including the patched libwolfssl-5.5.1, but still have
vulnerable services running using the vulnerable libwolfssl-5.4.0.

So in order to propagate update of libwolfssl to latest stable release
done in commit ec8fb542ec3e4 ("wolfssl: fix TLSv1.3 RCE in uhttpd by
using 5.5.1-stable (CVE-2022-39173)") which fixes several remotely
exploitable vulnerabilities, we need to bump PKG_RELEASE of all packages
using wolfSSL library.

Same bump has been done in buildroot in commit f1b7e1434f66 ("treewide:
fix security issues by bumping all packages using libwolfssl").

Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 845d81ca09)
(cherry picked from commit f624e41f38)
2022-10-05 21:37:47 +02:00
Michael Heimpold
0b9b8e5ae6 Merge pull request #19518 from mhei/21.02-php8-update-8.0.24
[21.02] php8: update to 8.0.24
2022-10-04 17:35:32 +02:00
Michael Heimpold
b7fdf56f99 Merge pull request #19517 from mhei/21.02-php7-update-7.4.32
[21.02] php7: update to 7.4.32
2022-10-04 17:35:16 +02:00
Michael Heimpold
0498d79d74 php8: update to 8.0.24
This fixes:
    - CVE-2022-31629
    - CVE-2022-31628

Also refresh patch to apply cleanly.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-10-04 12:33:48 +02:00
Michael Heimpold
64f2ed8fbf php7: update to 7.4.32
This fixes:
    - CVE-2022-31628
    - CVE-2022-31629

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-10-04 07:41:38 +02:00
Karl Palsson
47d63847e1 libs/cjson: bump to 1.7.15
This is a bugfix release.
Full release notes available at: https://github.com/DaveGamble/cJSON/releases/tag/v1.7.15

Signed-off-by: Karl Palsson <karlp@etactica.com>
2022-09-26 09:30:46 +00:00
Karl Palsson
ac6980d6f3 mosquitto: bump to 2.0.15
Changelog: https://mosquitto.org/blog/2022/08/version-2-0-15-released/
Changelog: https://mosquitto.org/blog/2021/11/version-2-0-14-released/

2.0.15 is bigger security and bugfix release.  2.0.14 had a couple of
  minor changes and was skipped for OpenWrt.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2022-09-26 09:28:48 +00:00
Ptilopsis Leucotis
58befda000 mosquitto: add missing 'persistence' section in config
Section 'Persistence' in 'luci-app-mosquitto' is unusable without 'persistence'
section in config file.

Signed-off-by: Ptilopsis Leucotis <PtilopsisLeucotis@yandex.com>
2022-09-26 09:28:25 +00:00
Daniel Golle
8aa01bc1d7 snowflake: run snowflake-proxy with procd-ujail
snowflake-proxy doesn't write any files
 => run in read-only rootfs environment

the process needs to read SSL certs but no other files
 => only exposed path is /etc/ssl/certificates (read-only)

running as unpriviledged user with no additional capabilities
 => set no-new-privs bit

By default procd-ujail also isolates the process by executing it in
a separate new IPC and PID namespace.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 0f3d48a378)
Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-09-25 07:34:12 +02:00
Daniel Golle
78e3330287 snowflake: add package
Package Tor's Snowflake system components so users can offer e.g.
a standalone Snowflake proxy on their routers or other devices.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit cf120a7eff)
Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-09-25 07:34:05 +02:00
Noah Meyerhans
894e2763ac bind: bump to 9.18.7
Fixes multiple security issues:

CVE-2022-38178 - Fix memory leak in EdDSA verify processing

CVE-2022-3080 - Fix serve-stale crash that could happen when
			stale-answer-client-timeout was set to 0 and there was
			a stale CNAME in the cache for an incoming query

CVE-2022-2906 - Fix memory leaks in the DH code when using OpenSSL 3.0.0
			and later versions. The openssldh_compare(),
			openssldh_paramcompare(), and openssldh_todns()
			functions were affected

CVE-2022-2881 - When an HTTP connection was reused to get
			statistics from the stats channel, and zlib
			compression was in use, each successive
			response sent larger and larger blocks of memory,
			potentially reading past the end of the allocated
			buffer

CVE-2022-2795 - Prevent excessive resource use while processing large
			delegations

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit 58bcd3fad3)
2022-09-23 18:06:44 -07:00
Tianling Shen
dfdb769f83 yq: Update to 4.27.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit fca4f1b830)
2022-09-23 13:42:47 -07:00
Glenn Strauss
f3ab672f40 lighttpd: update to lighttpd 1.4.67 release hash
* update to lighttpd 1.4.67 release hash

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit f750089d26)
2022-09-23 13:42:24 -07:00
Glenn Strauss
c7e8e074d0 lighttpd: update to lighttpd 1.4.66 release hash
* update to lighttpd 1.4.66 release hash

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 5eaf000c83)
2022-09-23 13:42:24 -07:00
Michal Vasilek
79fc23ce05 knot-resolver: update to 5.5.3
* fixes CVE-2022-40188

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 5d2fd88693)
2022-09-23 00:43:29 +02:00
Tianling Shen
5f5a782da4 libtorrent-rasterbar: Update to 2.0.7
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c741bf64cd)
2022-09-22 01:21:28 -07:00
Josef Schlehofer
50684ca9f3 Merge pull request #19408 from paper42/knot-3.2.1-21
[21.02] knot: update to version 3.2.1
2022-09-21 09:38:56 +02:00
Jan Hák
0e72180bb2 knot: update to version 3.2.1
Signed-off-by: Jan Hák <jan.hak@nic.cz>
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 023df0992a)
2022-09-19 13:43:56 +02:00
Michal Vasilek
690d8dfab5 python-flask-socketio: update to 5.3.1
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 7fd9d010a2)
2022-09-16 14:45:45 +02:00
Rafał Miłecki
d7c47ba5ed ksmbd-tools: add package with hotplug.d script for auto sharing
One of common use cases for SMB3 server in routers is sharing hotplugged
drives. Users make many attempts setting that up which often are not
optimal.

This script handles it in the cleanest way by using:
1. hotplug.d mount subsystem
2. runtime config in the /var/run/config/

It provides a working basic solution that can be later adjusted by
modifying provided hotplug script.

A pretty much idential solution was part of the samba36 package. It was
added in the OpenWrt commit ef1efa756e0d0 ("samba36: add package with
hotplug.d script for auto sharing") as an answer for feature required by
the Rosinson company.

Cc: Jo-Philipp Wich <jo@mein.io>
Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
(cherry picked from commit d0406d4c95)
2022-09-10 16:05:51 +02:00
Rafał Miłecki
065ea581b8 ksmbd-tools: append config from /var/run/config/ for runtime shares
Dynamically created shares shouldn't be stored in the /etc/config/
because of:
1. Flash wearing
2. Risk of inconsistent state on reboots

With this change all automation/hotplug.d scripts can store runtime in
the /var/run/config/samba. It's useful e.g. for USB drives that user
wants to be automatically shared.

Also: automated scripts should never call "uci [foo] commit" as that
could flush incomplete config. This problem also gets solved.

Identical feature was added to samba36 in the OpenWrt commit
5a59e2c059866 ("samba36: append config from /var/run/config/ for runtime
shares") but wasn't ported to ksmbd until now.

Cc: Jo-Philipp Wich <jo@mein.io>
Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
(cherry picked from commit c9cba61989)
2022-09-10 16:05:36 +02:00
Josef Schlehofer
131ddf2370 syslog-ng: update to version 3.38.1
- Release notes:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.38.1

- Update the configuration file to use version 4.0 as mentioned in the
  release notes to try the latest changes

Fixes: CVE-2022-38725

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 34b7af9e08)
2022-09-08 09:58:34 +02:00
Tianling Shen
e86c4376d3 yq: Update to 4.27.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 90a76f6467)
2022-09-03 14:05:04 -07:00
Josef Schlehofer
51077c1094 Merge pull request #19219 from ErwanMAS/backport_modifications_master
tinc: backport  from master modifications
2022-08-30 16:17:20 +02:00
Erwan MAS
b9f45b9ded tinc: add creation of hosts directory for each network configuration
Signed-off-by: Erwan MAS <erwan@mas.nom.fr>
(cherry picked from commit fb99d50c1e)
2022-08-30 10:50:56 +02:00
Etienne Champetier
4af55248a4 tinc: use 'uci_get_state' instead of 'uci -P /var/state get'
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 440d3c0450)
2022-08-30 10:50:46 +02:00
Petr Štetiar
3d2af69629 syslog-ng: fix OOM issues by adding support for logrotate
With heavy system logging which goes by default into `/var/log/messages`
log file which is usually placed in tmpfs/RAM one can trigger OOM killer
fairly easily, thus killing random processes and in some cases making
system unusable.

This is likely happening due to the fact, that Linux by default uses 1/2
of available RAM for tmpfs, which might be for example an issue on low
RAM devices with ath10k wireless.

So let's fix it by adding logrotate functionality which should limit the
size of `/var/log/messages` log file to 1M by default, but could be
tweaked by config knob if needed be.

Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 660fa63faf)
2022-08-27 14:41:20 +02:00
Josef Schlehofer
df67597ab6 python-uci: update to version 0.9.0
- Release notes:
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.9.0
- Update copyright while at it.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e340fe8a12)
2022-08-26 16:56:01 +02:00
Alexandru Ardelean
b7b0c80a5f Merge pull request #19223 from commodo/django-21.02
[21.02] django: bump to version 3.2.15
2022-08-24 12:27:40 +03:00
Josef Schlehofer
7662d4801b libgd: add conflicts to each other
The full variant should conflict with the default variant. This prevents that
libgd and libgd-full could be installed side by side, and also, the full
variant should provide the libgd. Otherwise, if you install libgd-full,
you can not install vnstat.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 42b36b7180)
2022-08-24 08:25:38 +02:00
Karel Kočí
7bdf878cd7 vim: variants conflict with each other
This adds conflicts between the variants,
because they provide the same files, and it should not be
possible to install them side by side. Otherwise, it might happen that
half files would be from one variant and the other half from the
other.

Also, adds provides as if you request to install ``vim`` and
``vim-full``, then the request could be satisfied even they collide,
because ``vim-full`` provides ``vim`` package.

Signed-off-by: Karel Kočí <cynerd@email.cz>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[add commit message]
(cherry picked from commit 46c058468a)
2022-08-24 08:25:33 +02:00
Josef Schlehofer
70ac536827 pciutils: backport patch to fix compilation with older binutils
While building pciutils 3.8.0 for OpenWrt 21.02 includes target
mvebu/cortex-a9, mvebu/cortex-a53 and powerpc/8540, it fails because of
this error:

-I<turris1x/ws/build/staging_dir/toolchain-powerpc_8548_gcc-8.4.0_musl/include>   -c -o filter.o filter.c
{standard input}: Assembler messages:
{standard input}:6: Error: multiple versions [`pci_filter_init@@LIBPCI_3.8'|`pci_filter_init@LIBPCI_3.3'] for symbol `pci_filter_init_v38'
{standard input}:8: Error: multiple versions [`pci_filter_parse_slot@@LIBPCI_3.8'|`pci_filter_parse_slot@LIBPCI_3.3'] for symbol `pci_filter_parse_slot_v38'
{standard input}:10: Error: multiple versions [`pci_filter_parse_id@@LIBPCI_3.8'|`pci_filter_parse_id@LIBPCI_3.3'] for symbol `pci_filter_parse_id_v38'
{standard input}:12: Error: multiple versions [`pci_filter_match@@LIBPCI_3.8'|`pci_filter_match@LIBPCI_3.3'] for symbol `pci_filter_match_v38'
make[4]: *** [<builtin>: filter.o] Error 1
make[4]: Leaving directory '<turris1x/ws/build/build_dir/target-powerpc_8548_musl/pciutils-3.8.0/lib'>
make[3]: *** [Makefile:70: lib/libpci.so.3.8.0] Error 2
make[3]: Leaving directory '<turris1x/ws/build/build_dir/target-powerpc_8548_musl/pciutils-3.8.0'>
make[2]: *** [Makefile:88: <turris1x/ws/build/build_dir/target-powerpc_8548_musl/pciutils-3.8.0/.built]> Error 2
make[2]: Leaving directory '<turris1x/ws/build/feeds/packages/utils/pciutils'>

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f08dadd517)
2022-08-23 21:14:35 +02:00
Jan Hák
3db217c3c7 liburcu: update to version 0.13.2
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 754ba8920b)
2022-08-22 14:33:14 +02:00
Jan Hák
0e633485cf knot: update to version 3.2.0
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 74e2bfdd27)
2022-08-22 14:23:21 +02:00
Alexandru Ardelean
ec98bccb1d django: bump to version 3.2.15
Fixes: https://nvd.nist.gov/vuln/detail/CVE-2022-36359

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-08-22 09:27:42 +03:00
Paul Spooren
f50a80b79c CI: checkout HEAD commit rather than merge commit
GitHub CI actions/checkout uses a merge commit which isn't compatible
with our formality checks. Instead checkout the pull request HEAD.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 13c1f2bcda)
2022-08-21 23:33:12 +02:00
Paul Spooren
29ad225700 CI: migrate formal checks from CircleCI to GitHub
Run the formal checks like SoB message via the GitHub CI.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 1b46af0e59)
2022-08-21 23:28:21 +02:00
Marko Ratkaj
edf1bf7ef0 squid: bump to 4.17
Signed-off-by: Marko Ratkaj <markoratkaj@gmail.com>
(cherry picked from commit 15132b85b7)
2022-08-21 19:28:48 +02:00
Rosen Penev
2fed0daa7f squid: update to 4.16
Fixes compilation with GCC11.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ad4c04283e)
2022-08-21 19:28:44 +02:00
Fabian Lipken
8b198ed582 dnscrypt-proxy2: update to version 2.1.2
Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
(cherry picked from commit 2c617bbe22)
2022-08-21 16:31:56 +02:00
Lucian Cristian
859cd297b2 pciutils: update to 3.8.0
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit c5ec5c70b3)
2022-08-20 23:34:05 +02:00
Tianling Shen
7c4018dcf1 rclone: Update to 1.59.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5c4b54de56)
2022-08-18 19:53:29 -07:00
Jonathan Pagel
ca82b6fcd8 telegraf: Update to version 1.23.4
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit e4555e03ee)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-08-18 18:04:08 +02:00
Jonathan Pagel
7020b3a299 telegraf: Add influxdb2 output plugin to package version small
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit a5e96189c3)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-08-18 17:42:26 +02:00
Jan Hák
4740fd060b knot: update to 3.1.9
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 39a08a7aaf)
2022-08-17 23:28:26 +02:00
Alexandru Ardelean
7b6094381a numpy: bump to version 1.20.2
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 731bb0265d)
2022-08-13 12:34:45 +02:00
Liangbin Lian
5b5685f90a rclone: fix init script on CIDR format ipaddr
Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
(cherry picked from commit 7af716f12d)
2022-08-13 11:35:14 +02:00
Josef Schlehofer
9daf44b788 Merge pull request #19140 from BKPepe/gcc-21.02
gcc: update to allow compiling different versions
2022-08-13 10:08:32 +02:00
Josef Schlehofer
da99ae7ec5 python-websockets: update to version 10.3
- Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ce1679a07f)
2022-08-13 07:57:10 +02:00
Lucian Cristian
baad17e96f libreswan: update to 4.6
this update also fixes a CVE

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit ec252c20cc)
2022-08-12 05:49:20 +02:00
Lucian Cristian
f47ecdc42f libreswan: update to 4.5
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit b2efa063d2)
2022-08-12 05:49:12 +02:00
Rosen Penev
f303e87a1e nss: update to 3.67
Switch to AUTORELEASE for simplicity.

Disable parallel compilation as there's something wrong with NSS' build
system. Reliably fails with make -j 12 on a ryzen 3600.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1b9e204700)
2022-08-11 21:56:21 +02:00
Lucian Cristian
5824b879bf nss: update to 3.65
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 0f5eadf362)
2022-08-11 21:56:16 +02:00
Jo-Philipp Wich
b6b777ef5b cgi-io: update to latest Git HEAD
901b0f0 main: fix two one-byte overreads in header_value()

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 443c6c1c17)
2022-08-10 23:54:52 +02:00
W. Michael Petullo
33f72bb63e gcc: update to allow compiling different versions
This is based on the toolchain GCC, and aims to share as much of its
Makefile and patches with that definition. The package requires one
additional patch:

(1) 003-dont-choke-when-building-32bit-on-64bit.patch, which fixes the
`error: size of array 'test_real_width' is negative` error that occurs
when building a 32-bit GCC on a 64-bit host. (Search the Internet for
examples of this error appearing.)

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit ceaa6e840e)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[added gcc version 9.3.0, downgraded gcc to 10.2.0, removed gcc version
11.3.0 as it is now in sync with OpenWrt 21.02]
2022-08-09 23:06:39 +02:00
Tianling Shen
f00e63dba2 yq: Update to 4.27.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 82a45b28b7)
2022-08-09 21:39:14 +03:00
Eneas U de Queiroz
8f2b0830c1 gcc: enable parallel building
Even though PKG_BUILD_PARALLEL is set for the package, the package calls
$(MAKE) without $(PKG_JOBS), so it was always built with only one job.

Fix this by adding $(PKG_JOBS) to the $(MAKE) call, and calling make
install only after make all is finished.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 1f91016ac3)
2022-08-08 17:36:19 +02:00
Dirk Neukirchen
bd1fcf1d52 gcc: add cc symlink
fixes #14755

Signed-off-by: Dirk Neukirchen <plntyk.lede@plntyk.name>
(cherry picked from commit 55cb4d1aee)
2022-08-08 17:36:11 +02:00
Johnny Vogels
245360575b Pulseaudio: update to 14.2; avahi-variant: Restore Bluez functionality
Signed-off-by: Johnny Vogels <35307256+jmv2009@users.noreply.github.com>

Pulseaudio: update to 14.2; avahi-variant: Restore Bluez functionality

Signed-off-by: Johnny Vogels <35307256+jmv2009@users.noreply.github.com>
2022-08-07 19:00:12 -07:00
Josef Schlehofer
2e4d12f902 Merge pull request #19121 from autobakterie/libgpg-error_1-45
libgpg-error: update to 1.45
2022-08-06 20:03:49 +02:00
Šimon Bořek
ec0bd2b964 luajit: patch: PPC/e500 SPE: use soft float instead of failing
makes LuaJit builds for mpc85xx targets with SPE ISA extension
enabled possible

Quoting inner commit message:

This allows building LuaJit for systems with Power ISA SPE
extension[^1] support by using soft float on LuaJit side.

While e500 CPU cores support SPE instruction set extension
allowing them to perform floating point arithmetic natively,
this isn't required. They can function with software floating
point to integer arithmetic translation as well,
just like FPU-less PowerPC CPUs without SPE support.

Therefore I see no need to prevent them from running LuaJit
explicitly.

[^1]: https://www.nxp.com/docs/en/reference-manual/SPEPEM.pdf

Signed-off-by: Pali Rohár <pali@kernel.org>
Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
(cherry picked from commit a4a484fbca)
2022-08-06 19:43:34 +02:00
W. Michael Petullo
e3645778a8 libgpg-error: update to 1.45
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit c4842bdd20)
2022-08-06 16:05:54 +02:00
W. Michael Petullo
62cd173b3a libgpg-error: update to 1.43
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit d6000af907)
2022-08-06 16:05:53 +02:00
ZiMing Mo
2b03f2baef rclone: update to 1.59.0
Release note: https://rclone.org/changelog/#v1-59-0-2022-07-09

Signed-off-by: ZiMing Mo <msylgj@immortalwrt.org>
(cherry picked from commit 05df1fe4f1)
2022-08-03 20:33:27 +02:00
Hannu Nyman
a179f2f597 nano: update to 6.4
Update nano editor to version 6.4.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 0aed202180)
2022-08-02 21:04:25 +03:00
Rosen Penev
a4b1fa64e6 ksmbd: update to 3.4.5
Major changes are:

Add support for smbd-direct multi-desctriptor.
Add support for dkms.
Add support for key exchange.
Fix seveal bugs.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-08-02 11:01:06 +02:00
Rosen Penev
ca85d7742d ksmbd-tools: update to 3.4.5
Major changes are:

Add support for Heimdal as the Kerberos 5 implementation.
Add smbd max io size parameter.
Accept global share options.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-08-02 11:01:06 +02:00
Rosen Penev
9c6950e518 ksmbd-tools: update to 3.4.4
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-08-02 11:01:06 +02:00
Fritz D. Ansel
a5c7be289f ksmbd: set stoplevel
to allow graceful stop of the daemon

Signed-off-by: Fritz D. Ansel <fdansel@yandex.ru>
(cherry picked from commit 28ed2b82c5)
2022-08-02 11:01:06 +02:00
Jonathan Pagel
8ad4a70310 telegraf: Update to version 1.23.3
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 281d156a35)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-07-25 18:37:59 -07:00
Jan Hák
5e6363ada4 knot: update to 3.1.8
- Release notes:
https://www.knot-dns.cz/2022-04-28-version-318.html

- Refreshed patch to avoid offset

Signed-off-by: Jan Hák <jan.hak@nic.cz>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[added commit message, refresh patch]
(cherry picked from commit db12181940)
2022-07-25 16:49:26 +02:00
Gerard Ryan
705a45a575 dockerd: Update to v20.10.17
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-07-24 17:35:30 -07:00
Gerard Ryan
13e721e57c docker: Update to v20.10.17
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-07-24 17:35:30 -07:00
Gerard Ryan
01c440a8aa libnetwork: Update to f6ccccb for Docker v20.10.17
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-07-24 17:35:30 -07:00
Gerard Ryan
9b643a0700 containerd: Update to v1.6.6 for Docker v20.10.17
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-07-24 17:35:30 -07:00
Gerard Ryan
1e53195c7a runc: Update to v1.1.2 for Docker v20.10.17
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-07-24 17:35:30 -07:00
Nick Hainke
40d9e5a45c dawn: update to 2022-07-24
edca4d2 network: rework network status callbacks

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 28ca76d29b)
2022-07-24 13:18:21 +02:00
Nick Hainke
0c15d77f89 dawn: update to 2022-07-22
10fb043 network: dump detail on ping pong received

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 1f60c23296)
2022-07-22 21:55:07 +02:00
Alexandru Ardelean
72147f3b94 Merge pull request #18965 from commodo/django-update-21-02
[21.02] django: bump to version 3.2.14
2022-07-22 14:44:32 +03:00
Nick Hainke
412a04b488 dawn: update to 2022-07-21
bb362db datastorage: fix ap_array_unlink_entry always returns NULL
47e98ef network: ping pong keepalive for tcp connections
eba0354 network: add timeout for client connections

In the dawn config the con_timeout needs to be added:
  option con_timeout '60'

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 204fd77bbc)
2022-07-21 18:45:49 +02:00
Jeffery To
8a03e65655 golang: Update to 1.17.12
Includes fixes for:

* CVE-2022-1705: net/http: improper sanitization of Transfer-Encoding
  header
* CVE-2022-1962: go/parser: stack exhaustion in all Parse* functions
* CVE-2022-28131: encoding/xml: stack exhaustion in Decoder.Skip
* CVE-2022-30630: io/fs: stack exhaustion in Glob
* CVE-2022-30631: compress/gzip: stack exhaustion in Reader.Read
* CVE-2022-30632: path/filepath: stack exhaustion in Glob
* CVE-2022-30633: encoding/xml: stack exhaustion in Unmarshal
* CVE-2022-30635: encoding/gob: stack exhaustion in Decoder.Decode
* CVE-2022-32148: net/http/httputil: NewSingleHostReverseProxy - omit
  X-Forwarded-For not working

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-07-20 02:38:16 -07:00
Tianling Shen
b519ab08e5 yq: Update to 4.26.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4df4b8eae7)
2022-07-18 19:44:54 +02:00
Tianling Shen
5c8f038b70 xray-core: Update to 1.5.9
Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 25922c6afd)
2022-07-18 19:44:06 +02:00
Nick Hainke
8ea0a73b81 dawn: update to 2022-07-18
e596ff1 ubus.c: only add nr entries matching our own SSID

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit bb0d45ed35)
2022-07-18 18:24:19 +02:00
Alexandru Ardelean
c45f72086c django: bump to version 3.2.14
Fixes https://nvd.nist.gov/vuln/detail/CVE-2022-34265

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-07-18 17:42:45 +03:00
Michal Vasilek
57d7325a88 postfix: fix download failure
cdn.postfix.johnriley.me serves a certificate for a different domain
name.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit d4feef97e6)
2022-07-17 15:03:54 +02:00
Nick Hainke
c1b43cf1c9 dawn: update to 2022-07-16
0689b5e ubus: add missing lock for ubus hearing_map
4b7db09 CONFIGURE.md: fix typo
b3f61d4 CONFIGURE.md: adjust documentation about log levels

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit eef9ee0b83)
2022-07-16 19:52:33 +02:00
Eneas U de Queiroz
5d6ea25959 libuwsc: fix compiltation with wolfSSL
wolfssl/options.h needs to be included before the other wolfssl headers
to enable OpenSSL API required to build the package.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 8fb3fd3dac)
2022-07-15 13:14:58 -07:00
Jonathan Pagel
efb51fc258 telegraf: Update to version 1.23.2
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 591f8cad33)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-07-14 20:42:06 +02:00
Jonathan Pagel
a7514c233d telegraf: Update to version 1.23.1
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 9b1cdb7b52)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-07-14 20:42:06 +02:00
Eneas U de Queiroz
e399927bee xr_usb_serial_common: bump to 2022-03-30
This is the latest commit that touches the xr_usb_serial_common-1a dir.
The changes are restricted to whitespace fixes and kernel version
adaptations:
ecc6ebe xr_usb: Use tty_driver_kref_put for kernel 5.15 and above
caf6d25 xr_usb: Use tty_alloc_driver for kernel 5.15 and above
a42b7e6 xr_usb: Compilation fixes for kernel 5.14
497adb7 #39 fix compilation for newer linux kernels
9103471 xr_usb: fix some whitespace errors

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit eadab32450)
2022-07-14 12:47:04 +02:00
Rosen Penev
f63ff5f018 fio: update to 3.29
Fixes compilation with kernel 5.15

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d1edd7677a)
2022-07-14 12:08:23 +02:00
Petr Štetiar
c38d5976e8 libarchive: fix ext2fs build race error condition
libarchive looks for ext2fs headers during configure, and if it finds
them it will expect to find them during compile, or on the rare occasion
when they aren't it will fail:

 libarchive/archive_entry.c:59:55: fatal error: ext2fs/ext2_fs.h: No such file or directory

As we just need headers for some type constants, let's re-use headers
from tools/e2fsprogs package which are always available.

Reported-by: Adam Dov <adov@maxlinear.com>
Suggested-by: Paul Eggleton <paul.eggleton@linux.intel.com>
References: https://git.yoctoproject.org/poky/commit/?id=f0b9a7cf9f80be1917e45266fa201f464a28c1e5
Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 797945dfaa)
2022-07-13 08:47:35 +02:00
Hirokazu MORIKAWA
2ac03c2372 node: July 7th 2022 Security Releases
Update to v14.20.0

Release for the following issues:
HTTP Request Smuggling - Flawed Parsing of Transfer-Encoding (Medium)(CVE-2022-32213)
HTTP Request Smuggling - Improper Delimiting of Header Fields (Medium)(CVE-2022-32214)
HTTP Request Smuggling - Incorrect Parsing of Multi-line Transfer-Encoding (Medium)(CVE-2022-32215)
DNS rebinding in --inspect via invalid IP addresses (High)(CVE-2022-32212)

https://nodejs.org/en/blog/vulnerability/july-2022-security-releases/

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-07-10 22:38:30 +02:00
Jeffery To
580926cb6c python-cryptography: Fix failing build
Fixes https://github.com/openwrt/packages/issues/18876.
Fixes https://github.com/openwrt/packages/issues/18879.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 9e3b7d7883)
2022-07-07 09:54:10 -07:00
Etienne Champetier
50547b6d51 nft-qos: simplify ifname retrieval
network_get_device should be enough, and since https://git.openwrt.org/?p=openwrt/openwrt.git;a=commitdiff;h=4b9a67362d70c544b85078b8d5c661f43f7472d9
uci network config interface sections use 'device' instead of 'ifname',
rendering the fallback useless

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 76b750d720)
2022-07-06 13:30:33 +02:00
Stijn Segers
d5738504d0 unbound: update to 1.16.0
Signed-off-by: Stijn Segers <foss@volatilesystems.org>
(cherry picked from commit 695e0dbaa4)
2022-07-05 04:54:30 +02:00
Florian Eckert
6b1d459373 Merge pull request #18828 from nemesisdesign/openwrt-21.02
[21.02] openwisp-config: update to 1.0.1
2022-07-04 09:21:50 +02:00
Florian Eckert
0105c8d49b Merge pull request #18847 from nemesisdesign/monitoring-openwrt-21
[21.02] openwisp-monitoring: added 0.1.1
2022-07-04 09:21:03 +02:00
Federico Capoano
1a63a03305 openwisp-monitoring: added 0.1.1
Signed-off-by: Federico Capoano <f.capoano@openwisp.io>
(cherry picked from commit 0419a797ae)
2022-07-01 18:52:02 -04:00
Federico Capoano
f689115b4b openwisp-config: update to 1.0.1
Signed-off-by: Federico Capoano <f.capoano@openwisp.io>
(cherry picked from commit abb75e3a7b)
2022-07-01 18:44:25 -04:00
Florian Eckert
b44b37050d Merge pull request #18839 from TDT-AG/pr/collectd-fix-smart
collectd: fix smart plugin segfault
2022-06-30 16:42:42 +02:00
Florian Eckert
ebe9833ea0 collectd: smart: add patch to check udev_enumerate_scan_devices return value
The function udev_enumarte_scan_devices returns a value less than 0 on
failure. If this is the case then we terminate the read for this smart
information.

This change was already send upstream. And could be delete in feature
collectd versions.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 896a0f0db6)
2022-06-30 14:45:26 +02:00
Florian Eckert
2773123201 collectd: remove not needed fix
This was not a real fix but a workaround. It is no longer clear to me
why this was necessary. Deleting the patch restores the upstream
behaviour of the collected for the smart plugin. I have tested it and on
my system the hard disk to be monitored is recognised.

root@system ~ # cat /sys/class/block/sda/uevent
MAJOR=8
MINOR=0
DEVNAME=sda
DEVTYPE=disk

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit a9ea1cf6ed)
2022-06-30 14:45:20 +02:00
Florian Eckert
6570249dc5 Merge pull request #18838 from 1715173329/y2
[openwrt-21.02] yq: Update to 4.25.3
2022-06-30 11:45:57 +02:00
Tianling Shen
e23edff2f0 yq: Update to 4.25.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 15aff10231)
2022-06-30 16:23:09 +08:00
Sebastian Kemper
405dcf239b protobuf: fix 022aef6
The cherry-pick done in 022aef6 includes changing the build setup from
cmake to ninja, but it was overlooked that this was actually reverted in
2e654b1.

The ninja build results in headers not being installed for the host pkg,
so protobuf-c/host can't be build.

This commit reverts the package back to cmake.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2022-06-26 11:30:14 +02:00
Josef Schlehofer
20fab250dd syslog-ng: update to version 3.37.1
- Changelog:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.37.1

- Bump config version

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ae7aefe111)
2022-06-25 06:51:48 +02:00
Stijn Tintel
a37c65902b Revert "lxc: export systemd cgroups after install"
The postinst script is sourced during image build, which causes the
follow failure:
/home/stijn/Development/OpenWrt/openwrt/build_dir/target-x86_64_musl/root-x86/etc/init.d/lxc-auto: line 3: /lib/functions.sh: No such file or directory
postinst script ./usr/lib/opkg/info/lxc-auto.postinst has failed with exit code 1

Sourcing /lib/functions.sh is not needed, as /etc/rc.common does so
already. Unfortunately removing that line from the init script is not
enough to fix the problem. The postinst script should also check
IPKG_INSTROOT. As these two changes are unrelated, they should go in
separate commits, and the solution to the image build problem is to
revert the commit that introduced the breakage.

This reverts commit 2cde10b950.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 039912dec5)
2022-06-24 12:20:35 +02:00
Michal Vasilek
af27e76540 lxc: export systemd cgroups after install
otherwise, a user would have to either manually run /etc/init.d/lxc-auto
boot or reboot the system to start using lxc.

originally committed in 2cde10b950
reverted in 039912dec5

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 7da7356539)
(cherry picked from commit 345ae974bc)
2022-06-24 12:18:43 +02:00
Lucian Cristian
883fded23d libreswan: update to 4.4
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit b8c2ab47e1)
2022-06-23 23:34:00 +02:00
Lucian Cristian
e9130a712f libreswan: update to 4.3
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 7087177bb0)
2022-06-23 23:33:49 +02:00
W. Michael Petullo
8c4ec7faa3 nfdump: update to 1.6.24
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit d3b96a4b26)
2022-06-23 23:31:11 +02:00
Josef Schlehofer
92d379f752 knot-resolver: update to version 5.5.1
Changelog for versions:
- 5.4.4 [1]
- 5.5.0 [2]
- 5.5.1 [3]

[1] https://www.knot-resolver.cz/2022-01-05-knot-resolver-5.4.4.html
[2] https://www.knot-resolver.cz/2022-03-15-knot-resolver-5.5.0.html
[3] https://www.knot-resolver.cz/2022-06-14-knot-resolver-5.5.1.html

And refresh patch to avoid offset

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f74754fac1)
2022-06-23 20:14:38 +02:00
Michael Heimpold
79af866bae Merge pull request #18795 from mhei/21.02-php8-update
[21.02] php8: update to 8.0.20
2022-06-23 07:37:40 +02:00
Michael Heimpold
8d5bfb3110 Merge pull request #18794 from mhei/21.02-php7-update
[21.02] php7: update to 7.4.30
2022-06-23 07:37:11 +02:00
Rosen Penev
7be6cc19e0 luajit: backport softfloat ppc support
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 24c0007ea2)
2022-06-23 05:08:08 +02:00
Sergey V. Lobanov
0f1599d2b4 luajit: fix build on macos (ldconfig issue)
fix ldconfig build issue. This patch is a backport from upstream:
18c9cf7d37

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
(cherry picked from commit 42c4d25455)
2022-06-22 14:37:52 +02:00
Michael Heimpold
fc32551652 php8: update to 8.0.20
This fixes:
    - CVE-2022-31625
    - CVE-2022-31626

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-06-22 00:03:28 +02:00
Michael Heimpold
adb76ab12a php7: update to 7.4.30
This fixes:
    - CVE-2022-31625
    - CVE-2022-31626

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-06-21 23:38:26 +02:00
Stan Grishin
1248b48da7 Merge pull request #18699 from stangri/openwrt-21.02-curl
[21.02] curl: bump to 7.83.1
2022-06-21 12:42:04 -06:00
Tianling Shen
1acfe6ed2a xray-core: Update to 1.5.8
Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c6103fe402)
2022-06-21 20:21:31 +03:00
Nick Hainke
64da0fdd54 dawn: update to 2022-06-13
88c78b4 memory_utils: fix reallocation

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 4a9eaecf58)
2022-06-14 20:10:28 +02:00
Nick Hainke
9cab118229 dawn: update to 2022-06-11
4cf9d0b treewide: code and documentation cleanup
48b12ee datastorage: Minor chnages to kicking algorithm to tidy up some handling.
7b615b6 treewide: improve beacon/probe logging
185f31b treewide: improve beacon request handling
0c2e713 datastorage/ubus: Add "soft" kicking algorithm
38f60c5 treewide: RSSI / RCPI handling updates
aba3e81 documentation: Parameter defaults and documentation
3979fdf treewide: cleanup code
e3b3753 scoring: improve scoring algorithm
33f380f treewide: cleanup code
b42193f kicking: improve kicking algorithm
16deab3 treewide: improve mutex handling
31f0a37 test: cleanup tests and add some test scripts
43ca8b8 treewide: fix bugs from Coverity Scan
8ae2a42 utils/storage: improve descriptions
9a9b4dd ubus: Simplify loops and scans in generating hearing map
c833064 treewide: rework mutex
1df5bc5 (master) network: cleanup and improve network handling
3bd349a utils: cleanup
a855087 utils/storage: cleanup
439fe95 ubus/datastorage/msghandler: cleanup
335ace2 datastorage: improve linked list
40ebf48 ubus/datastorage: cleanup
c13c285 utils: cleanup
0e4fc50 documentation: Heavily revised Markdown documentation files

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 0c74ab9a79)
2022-06-14 20:10:28 +02:00
Nick Hainke
a43077742d dawn: update to 2022-06-09
850a75c fix compilation with GCC12
2ac7b9d workflow: fix workflow

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 96975a1f78)
2022-06-14 20:10:28 +02:00
Jonathan Pagel
cae6530b91 telegraf: update to version 1.23.0
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit e8f6600851)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-06-13 19:42:02 -07:00
Rosen Penev
df56b54ba5 libprotobuf-c: update to 1.4.0
Remove patch. Upstream fixed it.

Add AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 40d2b7c43e)
2022-06-13 11:26:10 +02:00
Rosen Penev
526b90e5cb protobuf: update to 3.17.3
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0c3ee90b07)
2022-06-13 09:56:34 +02:00
Rosen Penev
d3e4427a47 protobuf: update to 3.17.2
Refreshed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 11acce8fa9)
2022-06-13 09:56:27 +02:00
Glenn Strauss
cde73af87b lighttpd: update to lighttpd 1.4.65 release hash
* update to lighttpd 1.4.65 release hash
* specify lua version w/ -Dlua_version=lua to avoid patching meson.build

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit db8205e545)
2022-06-13 09:20:04 +02:00
Hannu Nyman
a47793efde irqbalance: upstream patch to fix segfault
Apply post-1.9.0 patch from upstream to fix a segfault.
savedptr can be NULL, so guard for that.

Fixes #18741

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit ab7a23102e)
2022-06-12 20:33:53 +03:00
Hannu Nyman
7ab65a4bc8 irqbalance: upstream patch to fix irq-module relation
Apply post-1.9.0 patch from upstream to fix the irq-->module
relation detection.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 358c2293fa)
2022-06-12 20:33:49 +03:00
Jottr Doe
f015d68639 mosh-full: Add perlbase-text dependency
Fixes https://github.com/openwrt/packages/issues/18182

Signed-off-by: Jottr Doe <jottr@users.noreply.github.com>
(cherry picked from commit 17d7efe7e7)
2022-06-12 10:40:06 +02:00
Jottr Doe
082c0bafc6 mosh-full: Sort dependencies alphabetically
Signed-off-by: Jottr Doe <jottr@users.noreply.github.com>
(cherry picked from commit eaa37d2e8d)
2022-06-12 10:40:02 +02:00
Josef Schlehofer
ce0446269c beep: change git repository to fix CVE-2018-0492 and CVE-2018-1000532
1. Changed Git repository, which is used for Fedora packaging
https://github.com/johnath/beep/issues/11#issuecomment-450277122

Fixed CVEs:
CVE-2018-0492 - https://nvd.nist.gov/vuln/detail/CVE-2018-0492
CVE-2018-1000532 - https://nvd.nist.gov/vuln/detail/CVE-2018-1000532

2. Fixed SPDX License Identifier

3. Add patch to comment out -D_FORTIFY_SOURCE
Otherwise, it can not be built by default.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 6488eaf250)
2022-06-10 13:54:12 +02:00
Tianling Shen
bce5bf2d1e xray-core: increase nofile limitation
This fixes "too many open files" error caused by max-file limitation
when xray processes large traffic.

Reported-by: Terry Ding <terryding77@gmail.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d98fd52865)
2022-06-09 11:00:47 -07:00
Tianling Shen
b07d877b0f xray-core: Update to 1.5.7
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a60ebb597a)
[Removed upstreamed patch]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-06-09 11:00:47 -07:00
John Audia
aa5d781934 htop: update to 3.2.1
Build-tested: x86/64
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 6d73b8a09a)
2022-06-07 20:37:47 +03:00
Stan Grishin
baaa3ef00a curl: bump to 7.83.1
* https://curl.se/changes.html#7_83_1

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit b0f213a726)
2022-06-06 22:53:34 +00:00
Jeffery To
851e74107f golang: Update to 1.17.11
Includes fix for CVE-2022-30634 (crypto/rand: Read hangs when passed
buffer larger than 1<<32 - 1).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-06-06 15:09:00 -07:00
Josef Schlehofer
819ca44fad Merge pull request #18695 from jefferyto/python-3.9.13-openwrt-21.02
[openwrt-21.02] python3: Update to 3.9.13
2022-06-06 15:33:10 +02:00
Šimon Bořek
8ad1582871 netatalk: backport pending PR to fix segfaults
This commit backports pending PR, which solves segfaults:
- https://github.com/Netatalk/Netatalk/pull/174

To fix issues with segfaults described here:
- https://github.com/openwrt/packages/issues/18571
- https://github.com/Netatalk/Netatalk/issues/175

Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
2022-06-06 14:26:05 +01:00
Jeffery To
d53270bef3 python3: Update to 3.9.13
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-06-06 20:47:16 +08:00
Josef Schlehofer
3d1254a6dc CircleCI: Add 21.02 GPG and usign public keys and update to Debian 10
Debian 9 (stretch) comes with Python 3.5 by default and End of Life is going to be
on 30th June 2022, let's update it to Debian 10 (buster).

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 599e41c14b)
2022-06-06 09:47:14 +02:00
Hannu Nyman
b2b5fb407d irqbalance: remove local patch for socket directory
Upstream has finally patched the UI communication socket
creation to happen only if the irqbalance UI is enabled.

As we do not use the irqbalance UI, we can remove
our local fix implemented by 4f0c847828.
(If you want to enable irqbalance UI, the fix is still needed.)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 8e71e0ad97)
2022-06-05 20:05:27 +03:00
Hannu Nyman
336e603bdc irqbalance: update to 1.9.0
Update irqbalance to version 1.9.0
* adopt AUTORELEASE

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit e9002ff3d9)
2022-06-05 20:05:24 +03:00
Rosen Penev
904442b998 protobuf-c: don't build shared host library
No point and can avoid rpath hacks.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 89c2971c6e)
2022-06-03 16:31:14 +02:00
Rosen Penev
022aef6add protobuf: update to 3.15.6
Remove upstreamed patch.

Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1d0d8e057c)
2022-06-03 16:22:02 +02:00
Federico Capoano
4ebb81b254 openwisp-config: update to 1.0.0
Signed-off-by: Federico Capoano <f.capoano@openwisp.io>
2022-06-01 13:53:20 -07:00
Tianling Shen
3eb6ac98eb xray-core: fix build in go 1.17
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-06-01 13:52:27 -07:00
Tianling Shen
bdb503f30b xray-core: Update to 1.5.6
Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2f5980d589)
2022-06-01 13:52:27 -07:00
Tianling Shen
fa067f114c yq: Update to 4.25.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 31f9d48ff3)
2022-06-01 13:52:19 -07:00
Michael Heimpold
49df855b02 Merge pull request #18653 from mhei/21.02-libxml2-update
[21.02] libxml2: update to 2.9.14
2022-06-01 07:38:59 +02:00
Michael Heimpold
f7a2a22249 libxml2: update to 2.9.14
This fixes CVE-2022-29824.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit c12e1cfcab)
2022-05-31 22:04:10 +02:00
Michael Heimpold
9afd6ff023 Merge pull request #18630 from mhei/21.02-php8-update
[21.02] php8: update to 8.0.19
2022-05-30 23:07:47 +02:00
Michael Heimpold
790036b75e php8: update to 8.0.19
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-05-29 11:02:54 +02:00
Hirokazu MORIKAWA
174f05eb08 node: bump to v14.19.3
Updates OpenSSL to 1.1.1o (No impact in openwrt)
Upgrade npm to v6.14.17.
etc...

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-05-26 19:22:55 -07:00
Andreas Erhard
ba9ed60fab vpnc: Update to 0.5.3+git20220517
The new version of vpnc supports additional DH groups for improved key exchange security.

Signed-off-by: Andreas Erhard <andreas.erhard@i-med.ac.at>
(cherry picked from commit e82106eaeb)
2022-05-25 18:58:47 -07:00
Christian Lachner
d686016f0b haproxy: Update HAProxy to v2.2.24
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2022-05-25 17:05:19 -07:00
Eneas U de Queiroz
89f637f877 audit: Fix compilation with kernel 5.15
Linux 5.15 does not have the linux/ipx.h header.

The patch is a partial cherry-pick (skipped ChangeLog) of upstream
commit 6b09724c6 ("Make IPX packet interpretation dependent on the ipx
header file existing").

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 7be14da0d5)
2022-05-20 23:06:45 +02:00
Jeffery To
7f94a82dbf bluez: Update to 5.64, update/refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit d3cdfa3c30)
2022-05-20 12:15:05 -07:00
Rosen Penev
cfca43bd7c bluez: fix compilation with glibc
sync() is implemented now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit df8a0f324d)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-05-20 12:15:05 -07:00
Rosen Penev
50f3d089fb bluez: update to 5.62
Refresh patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3ee221d016)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-05-20 12:15:05 -07:00
Rosen Penev
30777cc241 bluez: update to 5.60
Switch to AUTORELEASE for simplicity.

Refresh patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 5c467bb76f)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-05-20 12:15:05 -07:00
Gerard Ryan
ad377dbf21 docker: Update to v20.10.16
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit b05dac5671)
2022-05-20 12:13:21 -07:00
Gerard Ryan
9832944ccd dockerd: Update to v20.10.16
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 81dd38677b)
2022-05-20 12:13:21 -07:00
Gerard Ryan
36343b2949 libnetwork: Updated to 339b97 for docker v20.10.16
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 127aa63898)
2022-05-20 12:13:21 -07:00
Gerard Ryan
ba72423a4d containerd: Update to v1.6.4 for docker v20.10.16
* Overrode `PREFIX` to have the old behaviour

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 9a7e3c0b7b)
2022-05-20 12:13:21 -07:00
Gerard Ryan
7a4a0d384a runc: Update to v1.1.1 for docker v20.10.16
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 8cf4c156c4)
2022-05-20 12:13:21 -07:00
W. Michael Petullo
3970ec5f9f openldap: update to 2.4.58
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit f200ccd6fc)

* remove a dead mirror
* use https
* fixes CVE-2021-27212

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-05-20 12:10:42 -07:00
David Bauer
5e9713802c usteer: update to latest HEAD
7afab96 usteer: Fix better candidate not being set in policy

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit c46095085a)
2022-05-19 12:49:46 +02:00
Stan Grishin
04c1963e8d Merge pull request #18362 from stangri/openwrt-21.02-https-dns-proxy
[21.02] https-dns-proxy: 2021-11-22-3: add support for Canary Domains
2022-05-19 12:00:48 +03:00
Jonathan Pagel
4e823fa9c7 telegraf: Update to version 1.22.4
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit f43a5f03bb)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-05-18 09:15:22 +02:00
Jeffery To
4882d012e2 Merge pull request #18544 from hexian000/openwrt-21.02
[openwrt-21.02] privoxy: update to 3.0.33 and fix the init script
2022-05-17 11:07:28 +08:00
Jeffery To
f46bbe6234 golang: Update to 1.17.10
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-05-16 06:27:16 -07:00
Jeffery To
32cb5b461c ci: Look for changed packages in the PR branch only
Fixes https://github.com/openwrt/packages/issues/15267.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 6b2294ac37)
2022-05-16 11:20:29 +02:00
He Xian
d110d19c5d privoxy: update to 3.0.33 and fix the init script
1. Fixed init script would kill itself when trying to stop a service.
2. Upgrade privoxy release to 3.0.33
3. Set PKG_RELEASE to AUTORELEASE

Signed-off-by: He Xian <hexian000@outlook.com>
(cherry picked from commit 5d917b9578)
2022-05-15 17:17:58 +08:00
Michal Vasilek
010e155408 lxc: export systemd cgroups after install
otherwise, a user would have to either manually run /etc/init.d/lxc-auto
boot or reboot the system to start using lxc.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 2cde10b950)
2022-05-15 07:29:51 +02:00
Michal Vasilek
07a36f7881 postgresql: security update to 13.7
* fixes CVE-2022-1552
* refresh a patch

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-05-14 21:34:19 -07:00
Nick Hainke
cece6220fb dawn: update to 2022-05-09
7a72674 datastorage/ubus: rework kicking algorithm

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 8b41e959d0)
2022-05-13 13:16:11 +03:00
Andy Dodd
28bbcf072f docker: Update to 20.10.14
Signed-off-by: Andy Dodd <atd7@cornell.edu>
(cherry picked from commit cd99c4cafb)
2022-05-11 17:51:41 -04:00
Andy Dodd
1c6913f8e3 dockerd: Update to 20.10.14, and update version checking mechanism
a7a7c732c0
changed package pinning from commit hash to version for some dependencies
(but not all, libnetwork is still referenced by commit)

Support the version-based pinning mechanism in addition to commit-based

Signed-off-by: Andy Dodd <atd7@cornell.edu>
(cherry picked from commit c3166c5a22)
2022-05-11 17:51:41 -04:00
Andy Dodd
32570305ca containerd: Update to 1.5.11
Signed-off-by: Andy Dodd <atd7@cornell.edu>
(cherry picked from commit a134a23a07)
2022-05-11 17:51:41 -04:00
Michal Vasilek
631704f1d3 runc: update to 1.0.3
* fixes CVE-2021-43784

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 9a4423995a)
2022-05-11 17:51:41 -04:00
Jeffery To
b25da4c4bb Merge pull request #18324 from jamesmacwhite/21.02-adguardhome-v0.107.6
[21.02] adguardhome: Update v0.107.6
2022-05-11 03:56:02 +08:00
Dirk Brenken
41e71ddf13 adblock: list maintenance
* add new oisd nsfw source (XL)
* change korean source name (again)
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 7c66d054bf)
2022-05-10 17:56:26 +02:00
Dirk Brenken
d16ebf9011 adblock: 4.1.3-8
* add new 'hblock' compilation source (XL, see https://hblock.molinero.dev for reference)
* print runtime/date information in ISO-8601 standard format
* minor cleanups

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 51a5ec6069)
2022-05-10 17:56:13 +02:00
Dirk Brenken
852ad561d8 adblock: 4.1.3-7
* removed discontinued source 'gaming'
* changed url of source 'reg_kr'

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit bed70d5f4b)
2022-05-10 17:56:01 +02:00
Dirk Brenken
2e80f6fecd adblock: 4.1.3-6
* remove discontinued sources: shallalist, stalkerware
* fix a logical glitch in startup trigger handling

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 81d468489f)
2022-05-10 17:55:47 +02:00
Rosen Penev
c67ffde468 adblock: make reproducible
Need to get rid of the timestamp.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 5d095a1366)
2022-05-10 17:55:27 +02:00
John Audia
7e0a011f9f htop: update to 3.2.0
Build-tested: x86/64
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <graysky@archlinux.us>
(cherry picked from commit b4043d9225)
2022-05-09 23:35:01 +03:00
Michal Vasilek
88b89e8d42 youtube-dl: update to 2021.12.17
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit ef29bf0163)
2022-05-06 19:10:20 +02:00
Josef Schlehofer
746f2e1f23 youtube-dl: update to version 2021.6.6
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit fbe3079179)
2022-05-06 19:10:15 +02:00
David Bauer
614135653f usteer: update to latest HEAD
46539ae policy: abort kick process for missing candidate
408bbca policy: don't kick clients immediatly
444b233 policy: only send preferred candidate with transition request

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit dcd33d5da6)
2022-05-06 08:43:09 +02:00
Matthias Schiffer
b9c04bf803 ecdsautils: update to v0.4.1
This fixes CVE-2022-24884.

Also update the package URL to match the source repository.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit de5671e582)
2022-05-05 18:47:40 +02:00
Josef Schlehofer
93aca6dfbe hwdata: update to version 0.359
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 600eecbac6)
2022-05-04 18:12:02 +02:00
Rui Salvaterra
f573a9937b tor: bump to 0.4.7.7 stable
The first stable release in the 0.4.7.x series.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 0b50456514)
2022-05-03 17:47:54 +02:00
Rui Salvaterra
c566bd79c9 tor: bump to 0.4.6.10 stable
Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 17e78a9790)
2022-05-03 17:47:50 +02:00
Rui Salvaterra
3848847039 tor: bump to 0.4.6.9 stable
Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 72974bed43)
2022-05-03 17:47:45 +02:00
Rui Salvaterra
f9d6632e6c tor: bump to 0.4.6.8 stable
Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 2997d2dcf5)
2022-05-03 17:47:41 +02:00
Rui Salvaterra
e963482cc6 tor: bump to 0.4.6.7
Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit c12cb0cdde)
2022-05-03 17:47:36 +02:00
Rui Salvaterra
6556cf1030 tor: bump to 0.4.6.6 stable
Run-tested on mvebu/cortexa9 (tor-basic) without issues.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit a45b962eef)
2022-05-03 17:47:27 +02:00
Tianling Shen
64f2b6bf6b rclone: Update to 1.58.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit cf81132418)
2022-05-01 09:21:16 -07:00
Tianling Shen
afd4a7beff libtorrent-rasterbar: Update to 2.0.6
Added new dependency "libstdcpp".
Removed an upstreamed patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2c78f8b154)
2022-04-30 11:23:27 -07:00
Rosen Penev
b65afe72b1 libtorrent-rasterbar: update to 2.0.5
Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 637ecf8c6a)
2022-04-30 11:23:27 -07:00
Rosen Penev
e15215463e libtorrent-rasterbar: update to 2.0.4
Backport patch fixing compilation with boost 1.77

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 19fcff0910)
2022-04-30 11:23:27 -07:00
Rosen Penev
77a328df70 libtorrent-rasterbar: update to 1.0.2
Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2fe4fe7d6e)
2022-04-30 11:23:27 -07:00
Tianling Shen
1a39f53112 yq: Update to 4.25.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 514ca20255)
2022-04-30 14:00:02 +02:00
Jonathan Pagel
53ff5a192a telegraf: upgrade to version 1.22.3
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit c5b668df5b)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-04-30 12:15:55 +02:00
Alexandru Ardelean
8b60367e15 django: bump to version 3.2.13
Fixes
https://nvd.nist.gov/vuln/detail/CVE-2022-28347
https://nvd.nist.gov/vuln/detail/CVE-2022-28346

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-04-29 15:27:56 -07:00
Hannu Nyman
12877669d5 nano: update to 6.3
Update nano editor to version 6.3

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit e076a9a40d)
2022-04-29 19:15:31 +03:00
Jan Hák
95c0d6633b knot: update to 3.1.7
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit f30da8c572)
2022-04-28 23:37:30 +02:00
Michael Heimpold
5c04009ae7 Merge pull request #18392 from mhei/21.02-php8-update
[21.02] php8: update to 8.0.18
2022-04-28 07:28:30 +02:00
Michael Heimpold
a4cf6a8857 php8: update to 8.0.18
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-04-26 21:16:47 +02:00
Jonathan Pagel
0d142ffd23 telegraf: Update to version 1.22.2
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit a93b3baba1)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-04-26 10:54:16 +02:00
Tianling Shen
587caf22a7 xray-core: Update to 1.5.5
Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 67c0a17fee)
2022-04-25 23:31:00 -07:00
Nick Hainke
87f14264fe prometheus-node-exporter-lua: improve ubnt-manager
It is costly in transmissions to add all information to each metric.
Instead, only use the "device" as a label and add all other important
labels to the "uptime" metric.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 9f3064a11c)
2022-04-25 14:23:20 +02:00
Jeffery To
bccdd3c8d0 Merge pull request #18365 from turris-cz/ffmpeg
ffmpeg: update to version 4.3.4
2022-04-25 17:20:11 +08:00
Josef Schlehofer
959860dc47 git: update to version 2.34.3
Fixes:
- CVE-2022-24765

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c77f4f9e1d)
2022-04-25 11:18:43 +02:00
Josef Schlehofer
4bbef65e25 Merge pull request #18369 from jefferyto/golang-1.17.9-openwrt-21.02
[openwrt-21.02] golang: Update to 1.17.9
2022-04-25 11:11:25 +02:00
Jeffery To
636342ee43 golang: Update to 1.17.9
Includes fixes for:
* CVE-2022-24675 - encoding/pem: stack overflow
* CVE-2022-28327 - crypto/elliptic: generic P-256 panic when scalar has
  too many leading zeroes

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-04-25 13:52:56 +08:00
Stan Grishin
eada42ae27 https-dns-proxy: 2021-11-22-3: add support for Canary Domains
Fixes https://github.com/stangri/source.openwrt.melmac.net/issues/155.
Background: https://support.mozilla.org/en-US/kb/canary-domain-use-application-dnsnet

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit cb3b47be433f43838a109c326152ef86354fa8da)
2022-04-25 01:12:33 +00:00
Josef Schlehofer
51231fc5c6 ffmpeg: update to version 4.3.4
Changelog: https://git.ffmpeg.org/gitweb/ffmpeg.git/shortlog/n4.3.4

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-04-24 15:19:36 +02:00
Luiz Angelo Daros de Luca
45426fa3d1 ruby: update to 3.0.4
Fixes:
- CVE-2022-28738: Double free in Regexp compilation
- CVE-2022-28739: Buffer overrun in String-to-Float conversion

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2022-04-23 10:31:37 +02:00
Petr Štetiar
4d34758b66 ci: use openwrt/gh-action-sdk@v4
[ Upstream commit b1355832a0 ]

In order to use feeds from GH mirror for GH actions, thus saving a lot
of resources being wasted.

Signed-off-by: Petr Štetiar <ynezz@true.cz>
2022-04-22 19:42:58 +02:00
Jeffery To
2a18d4fb3a Merge pull request #18298 from jamesmacwhite/21.02-ooniprobe-v3.14.2
[21.02] ooniprobe v3.14.2
2022-04-23 01:28:55 +08:00
Niels Widger
edc9829bdc delve: Update to 1.8.2
See https://github.com/go-delve/delve/blob/master/CHANGELOG.md for
changes.

Signed-off-by: Niels Widger <niels@qacafe.com>
2022-04-22 17:45:13 +02:00
David Bauer
fe3e0493d1 usteer: update to latest HEAD
f88ac23 local-node: periodically send link-measurement requests
4473c6e measurement: add missing timeout-reset
6d3314c local-node: handle received link-measurement reports
7df969f measurement: generalize measurement handling
bb61f2a local-node: enable link-measurement capability
4458b6f usteer: expose STA link measurement capability

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 0248058f6b)
2022-04-22 02:15:19 +02:00
Matt Merhar
8995d3f025 python3-speedtest-cli: update to 2.1.3
This includes a fix for a breaking change in the Speedtest API.

Signed-off-by: Matt Merhar <mattmerhar@protonmail.com>
(cherry picked from commit 77ebd65f49)
Signed-off-by: James White <james@jmwhite.co.uk>
2022-04-18 19:55:53 +02:00
James White
c41d8cadb8 adguardhome: Update v0.107.6
Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit ff6946e73e)
2022-04-18 08:47:15 +01:00
James White
827c375331 ooniprobe: Update 3.14.2
Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit ddb4ccfeaf)
2022-04-18 07:46:32 +01:00
Jan Pavlinec
04a580232b ooniprobe: update to version 3.10.1
Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>
(cherry picked from commit 3f62bd9df1)
Signed-off-by: James White <james@jmwhite.co.uk>
2022-04-18 07:43:35 +01:00
Jan Pavlinec
a33113111f ooniprobe: update to version 3.9.2
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit eda48170ec)
Signed-off-by: James White <james@jmwhite.co.uk>
2022-04-18 07:43:26 +01:00
Jan Pavlinec
9f90da7366 ooniprobe: update to version 3.9.0
Remove getrescources call because it is no longer
required.

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 354523d5b5)
Signed-off-by: James White <james@jmwhite.co.uk>
2022-04-18 07:43:18 +01:00
Jan Pavlinec
918ca913b7 ooniprobe: update to version 3.8.0
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit b2921628ab)
Signed-off-by: James White <james@jmwhite.co.uk>
2022-04-18 07:43:11 +01:00
Jan Pavlinec
a11f9a412a ooniprobe: update to version 3.7.0
Changes:
-add Configure stage to prebuild resources

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 17b18d825c)
Signed-off-by: James White <james@jmwhite.co.uk>
2022-04-18 07:43:05 +01:00
Jan Pavlinec
915fed2604 ooniprobe: update to version 3.5.2
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 3b25f4561f)
Signed-off-by: James White <james@jmwhite.co.uk>
2022-04-18 07:42:58 +01:00
Tianling Shen
78bcd00c13 yq: Update to 4.24.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit bedad06107)
2022-04-17 09:58:02 +02:00
Tianling Shen
8406439bdc yq: Update to 4.24.4
Updated GO_PKG due to upstream changes.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 07a29d211a)
2022-04-17 09:58:02 +02:00
Nick Hainke
754c075a8a prometheus-node-exporter-lua: fix ubnt-manager collector
Update the version and add ubnt-manager to the build section.

Fixes: 76f27975a9 (" prometheus-node-exporter-lua: add ubnt-manager collector ")

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 42e841039b)
2022-04-16 18:07:41 -04:00
Nick Hainke
8ac019e769 prometheus-node-exporter-lua: add ubnt-manager collector
Ubnt-manager-collector collects statistics from airos devices configured
in ubnt-manager.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 76f27975a9)
2022-04-16 18:07:41 -04:00
Nick Hainke
406abcbcc3 ubnt-manager: add ubnt-manager
This app makes it easier to work with AirOS devices. So far, only monitoring is implemented.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit e4a8d3fc29)
2022-04-16 18:07:41 -04:00
Peter van Dijk
216a37d655 pdns-recursor: add patch for CVE-2022-27227
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2022-04-14 18:54:40 -07:00
Peter van Dijk
f618daa55f pdns: add patch for CVE-2022-27227
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2022-04-14 18:54:40 -07:00
Michael Heimpold
8d1a786d5b Merge pull request #18284 from mhei/21.02-php7-pecl-redis-update
[21.02] php7-pecl-redis: update to 5.3.7
2022-04-11 20:34:33 +02:00
Hannu Nyman
427f2f995a haveged: update to 1.9.18
Update haveged to version 1.9.18

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 8579494bbb)
2022-04-11 18:26:39 +03:00
Michael Heimpold
25a2c9f702 php7-pecl-redis: update to 5.3.7
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-04-10 15:57:12 +02:00
Michael Heimpold
277f406b27 Merge pull request #18279 from mhei/21.02-php8-update
[21.02] php8: update to 8.0.17
2022-04-10 15:53:53 +02:00
Michael Heimpold
4bc363a5b9 Merge pull request #18280 from mhei/21.02-php7-pecl-http-update
[21.02] php7-pecl-http: update to 3.2.5
2022-04-10 15:53:34 +02:00
Michael Heimpold
3094dfadde php7-pecl-http: update to 3.2.5
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-04-09 13:50:53 +02:00
Michael Heimpold
77dcb4c906 php8: update to 8.0.17
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-04-09 11:37:10 +02:00
Jonathan Pagel
e74e59d04f telegraf: Update to version 1.22.1
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 86b8b30683)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-04-09 09:34:00 +02:00
Florian Eckert
14d7e1608d keepalived: fix libip6tc dependency
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Rebase commit: nftables is not available
(cherry picked from commit eed4277d5c)
2022-04-08 09:04:35 +02:00
Florian Eckert
3fbe10e598 keepalived: add missing CONFIG_ prefix to PKG_CONFIG_DEPENDS elements
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Rebase commit: nftables is not available
(cherry picked from commit 209bcc649a)
2022-04-08 09:04:10 +02:00
Jeffery To
ef44037b76 Merge pull request #18229 from jamesmacwhite/adguardhome-v0.107.5-21.02
[21.02] Update adguardhome to latest stable v0.107.5
2022-04-08 01:18:04 +08:00
Alexandru Ardelean
b3d1cd75a4 Merge pull request #18225 from rs/nextdns-1.37.11-openwrt-21.02
[21.02] nextdns: Update to version 1.37.11
2022-04-06 09:08:13 +03:00
James White
bbb13556dc adguardhome: Update adguardhome to v0.107.5
Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit b08aa72bad)
2022-04-03 09:00:50 +01:00
James White
19e621a432 adguardhome: Bump adguardhome to v0.107.3 stable
Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit 435733a899)
2022-04-03 09:00:41 +01:00
James White
d86d6d02b4 adguardhome: Update to v0.107.2 stable
Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit a02d4f646f)
2022-04-03 09:00:31 +01:00
Olivier Poitrey
9fa3942a8d nextdns: Update to version 1.37.11
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2022-04-02 20:59:22 +00:00
Tianling Shen
894f58ceb7 yq: Update to 4.24.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 3cbdc7e422)
2022-04-02 06:54:13 -07:00
Rosen Penev
fbcaa8bce8 ksmbd-tools: revert update to 3.4.4
This reverts commit 362c8c4df3.

This does not work with the kmod in tree.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-04-01 12:17:28 -07:00
Moritz Warning
7157e9b4d6 zerotier: revert to 1.8.4
This reverts commit 89cea2a6e7.
Zerotier 1.8.6 is broken on ipq806x.

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-03-30 19:39:07 -07:00
Josef Schlehofer
3e53f0c881 vala: update to version 0.56.0 (LTS version)
According, to the project website [1], we were not using long-term
version, but stable one. Let's use LTS version.

Changelog can be found on their GitLab [2].

[1] https://wiki.gnome.org/Projects/Vala
[2] https://gitlab.gnome.org/GNOME/vala/raw/0.56/NEWS

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 189f078a35)
2022-03-30 10:46:36 +02:00
Josef Schlehofer
384f983d53 vala: update to version 0.54.8
Changelog:
https://gitlab.gnome.org/GNOME/vala/raw/0.54/NEWS

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 474414dff1)
2022-03-30 10:45:59 +02:00
Rosen Penev
7be116683d vala: update to 0.54.2
Remove shared libraries. Allows removing rpath hacks.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 575776cfa5)
2022-03-30 10:45:33 +02:00
Rosen Penev
601bee7bf9 vala: update to 0.52.3
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f42b5288f9)
2022-03-30 10:45:28 +02:00
Rosen Penev
8359d159fe vala: update to 0.52.1
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d0b93ea224)
2022-03-30 10:45:23 +02:00
Daniel Golle
78aa0f6cac pynacl: fix build with updated sodium-minimal patch
Commit 3da874371 ("libsodium: include ed25519_core in minimal build")
broke the build of PyNaCl. Add patch to always include all ed25519
functions which are now always covered even if libsodium is built with
the MINIMAL option.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit ccd3b6c0a5)
2022-03-29 20:56:47 +02:00
Jeffery To
e6330a60e7 python3: Update to 3.9.12
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-03-27 12:40:55 -07:00
Jonathan Pagel
8142c9baf3 telegraf: Update to version 1.22.0 to openwrt 21.02
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 2c9c485822)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-03-27 12:39:06 -07:00
Tianling Shen
915018e39a rclone: Update to 1.58.0
Added missing call for rclone-config.

Refreshed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 546af5266b)
2022-03-27 21:44:33 +03:00
Daniel Golle
cd3dc69d6b gnunet-fuse: update to 0.16.0
Only notable change since 0.14.0 is that pthread_mutexattr_setkind_np()
is now no longer used.
pthread_mutexattr_setkind_np() is deprecated and non-standard.
The standard version is called pthread_mutexattr_settype()

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commits
 05eac1796d gnunet-fuse: update to version 0.14.0
 d59731ba61 gnunet-fuse: update to 0.16.0
)
2022-03-26 21:31:54 +00:00
Daniel Golle
add708f030 gnunet: update to version 0.16.2
Sync GNUnet package with master branch.
This is a new major release. It breaks protocol compatibility with the
0.15.x versions. Please be aware that Git master is thus henceforth
(and has been for a while) INCOMPATIBLE with the 0.15.x GNUnet network,
and interactions between old and new peers will result in issues.
0.15.x peers will be able to communicate with Git master or 0.16.x
peers, but some services - in particular GNS - will not be compatible.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commits
 deafd6cf3f gnunet: update to v0.14.1
 746bb95552 gnunet: update to version 0.15.3
 23b5b516ae gnunet: fix compilation with big endian
 c3c6a2ff1d gnunet: several improvements
 23f722f905 gnunet: packaging fixes
 2f8e696189 gnunet: update to 0.16.1
 f951f61005 gnunet: improve init script
 033744ac59 gnunet: update to 0.16.2
 65f5f850f3 gnunet: work-around sysupgrade restore missing file ownerships
)
2022-03-26 21:31:49 +00:00
Damiano Renfer
a62591148b libsodium: update maintainer email address
Signed-off-by: Damiano Renfer <x9w2n7xnu@relay.firefox.com>
(cherry picked from commit 7c529bab91)
2022-03-26 21:31:41 +00:00
Daniel Golle
4f7fcd9279 libsodium: include ed25519_core in minimal build
Functions from ed25519_core are needed for GNUnet to build.
Include them in the minimal build of libsodium so we don't need to
switch to the full build just for that.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 3da874371b)
2022-03-26 21:31:32 +00:00
Josef Schlehofer
c04905dd90 Merge pull request #18145 from hauke/samba4
[21.02] Samba4 backports from master (Fix CVEs)
2022-03-26 20:46:04 +01:00
Andy Walsh
7deecb5d9f samba4: update to 4.14.12
* update to 4.14.12
* fixes: CVE-2021-44142, CVE-2022-0336

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
(cherry picked from commit 1fa70d6a3c)
2022-03-25 12:12:07 +01:00
Andy Walsh
71734db270 samba4: update to 4.14.11; fix AD_DC build
* update to 4.14.11
* fix AD_DC build
* add vfs_widelinks to defaults
* refresh patches
* fixes: #16697, #17692
* fixes: CVE-2016-2124, CVE-2020-25717, CVE-2020-25718, CVE-2020-25719, CVE-2020-25721, CVE-2020-25722, CVE-2021-3738, CVE-2021-23192

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
(cherry picked from commit 7730a65d30)
[Do not add dependency to python3-markdown and python3-dns]
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2022-03-25 12:11:03 +01:00
Hannu Nyman
ee69afe6f1 nano: provide nano-full with most features enabled
Provide a new variant, nano-full, that enables almost
all functionality of nano. Only libmagic file type detection
has been left out.

Ship with a minimal /etc/nanorc that the user can modify.
nanorc documentation at
https://www.nano-editor.org/dist/latest/nanorc.5.html

Provide color highlighting for the uci config files.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 6a51794638)
2022-03-24 20:31:46 +02:00
Daniel Golle
951ef67479 netatalk: update to version 3.1.13
Please update to this latest release as soon as possible as this
releases fixes the following major security issues: CVE-2021-31439,
CVE-2022-23121, CVE-2022-23122, CVE-2022-23123, CVE-2022-23124,
CVE-2022-23125 and CVE-2022-0194.

Local patch '010-gcc10.patch' has been applied upstream and was hence
removed.

For a summary of news and a detailed list of changes see the
ReleaseNotes[1].

[1]: https://netatalk.sourceforge.io/3.1/ReleaseNotes3.1.13.html
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-03-24 17:50:40 +00:00
Josef Schlehofer
08a442fe9f Merge pull request #18125 from 1715173329/x2
[openwrt-21.02] xray-core: Update to 1.5.4
2022-03-24 08:40:00 +01:00
Josef Schlehofer
cfb44b1472 Merge pull request #18124 from 1715173329/y2
[openwrt-21.02] yq: Update to 4.23.1
2022-03-24 08:39:51 +01:00
Josef Schlehofer
cfc7069b3f Merge pull request #18123 from jefferyto/python-3.9.11-openwrt-21.02
[openwrt-21.02] python3: Update to 3.9.11, refresh patches
2022-03-23 09:11:14 +01:00
Tianling Shen
c2aeec5ef1 xray-core: Update to 1.5.4
Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f8fa16f40d)
2022-03-21 23:34:07 +08:00
Tianling Shen
5eb1ab8a6d yq: Update to 4.23.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8d7b7fbfb4)
2022-03-21 23:32:04 +08:00
Jeffery To
a7a93cfcc8 python3: Update to 3.9.11, refresh patches
Includes fixes for:
* Windows builds updated to bzip2 1.0.8 to mitigate CVE-2016-3189 and
  CVE-2019-12900
* CVE-2022-26488: Escalation of privilege via Windows Installer

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-03-21 22:03:05 +08:00
David Bauer
762794d143 usteer: add package
This commits adds the new usteer package to the packages feed.

usteer is a daemon for steering wireless clients across frequency
bands as well as between multiple access points on a network.

Signed-off-by: David Bauer <mail@david-bauer.net>
2022-03-21 01:30:58 +01:00
Moritz Warning
89cea2a6e7 zerotier: update to 1.8.6
* remove upstreamed gcc10 and cerrno patches
* disable SSO and OIDC as it needs Rust/Cargo support

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-03-21 00:25:10 +01:00
Moritz Warning
f7554858ec zerotier: update to 1.8.4
Also remove patch to fix uClibc-ng,
since it is not in openwrt anymore.

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-03-21 00:25:10 +01:00
Moritz Warning
7673192a9c zerotier: update to 1.8.3
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-03-21 00:25:10 +01:00
Moritz Warning
56c4570589 zerotier: update to 1.8.2
Update und switch back to release source package.

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-03-21 00:25:10 +01:00
Oskari Rauta
614b4e003a zerotier: update to 1.8.1
Release notes:

1.8.0
 - Upgrade json.hpp dependency to version 3.10.2
 - Check if DNS servers need to be applied on macOS
 - Set MAC address before bringing up Linux TAP link
 - Stop binding to temporary IPv6 addresses
 - Fix for mistakenly using v6 source addresses for v4 routes on some platforms
 - Fix for MacOS MTU capping issue on feth devices
 - Implement a workaround for one potential source of a "coma" bug, which can occur if buggy NATs/routers stop allowing the service to communicate on a given port. ZeroTier now reassigns a new secondary port if it's offline for a while unless a secondary port is manually specified in local.conf. Working around crummy buggy routers is an ongoing effort.
 - A completely rewritten desktop UI for Mac and Windows!

1.8.1
 - Fix an issue that could cause clobbering of MacOS IP route settings on restart.
 - Added additional hardening against address impersonation on networks (also in 1.6.6).
 - MacOS IPv6 no longer binds to temporary addresses as these can cause interruptions if they expire.
 - Remove support for REALLY ancient 1.1.6 or earlier network controllers.
 - Fix numerous UI issues from 1.8.0 (never fully released).

Changed to git as source and added $(AUTORELEASE)

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2022-03-21 00:25:10 +01:00
Chao Liu
52fcc9bf62 zerotier: add respawn procd param
Signed-off-by: Chao Liu <git@expiron.dev>
2022-03-21 00:25:10 +01:00
Moritz Warning
1e1d5f5d65 zerotier: add option to copy config
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-03-21 00:25:10 +01:00
Liangbin Lian
748d87c88e zerotier: fix cross compile in macOS
zerotier's Makefile use `uname` to detect target when cross compile
uname should always be 'linux'

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
2022-03-21 00:25:10 +01:00
Josef Schlehofer
921af7fdda Merge pull request #18103 from BKPepe/21.02-haproxy
haproxy: update to version 2.2.22
2022-03-19 04:02:05 +01:00
Josef Schlehofer
ac99fde549 haproxy: update to version 2.2.22
Fixes:
CVE-2022-0711

Changelog:
https://git.haproxy.org/?p=haproxy-2.2.git;a=blob;f=CHANGELOG;h=bfc5d6495e39ace56581663ce820e6909039a286;hb=bfc5d6495e39ace56581663ce820e6909039a286

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-03-18 21:00:56 +01:00
John Audia
ee4267e97f tree: bump to 2.0.2
Update to latest upstream release.

Build system: x86_64
Build-tested: bcm2711/RPi4B
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <graysky@archlinux.us>
(cherry picked from commit c333a5b8c5)
2022-03-18 20:49:57 +01:00
Chris Osgood
f01cf663b6 curl: Fix compiling curl wolfSSL IPv6 disabled
Fixes #18082

Signed-off-by: Chris Osgood <chris_github@functionalfuture.com>
(cherry picked from commit 4eb08bacf3)
2022-03-18 17:54:32 +01:00
Noah Meyerhans
185c5e365e bind: bump to 9.18.1
Fixes multiple security issues:

 * CVE-2022-0667 -- An assertion could occur in resume_dslookup() if the
                    fetch had been shut down earlier
 * CVE-2022-0635 -- Lookups involving a DNAME could trigger an INSIST when
                    "synth-from-dnssec" was enabled
 * CVE-2022-0396 -- A synchronous call to closehandle_cb() caused
                    isc__nm_process_sock_buffer() to be called recursively,
                    which in turn left TCP connections hanging in the CLOSE_WAIT
                    state blocking indefinitely when out-of-order processing was
                    disabled.
 * CVE-2021-25220 -- The rules for acceptance of records into the cache
                     have been tightened to prevent the possibility of
                     poisoning if forwarders send records outside the
                     configured bailiwick

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit 4c6ea5379c)
2022-03-18 08:25:18 -07:00
Rosen Penev
919dd80130 libnetfilter-log: update to 1.0.2
Remove all patches as they have been upstreamed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 28c1c0d24c)
2022-03-17 23:29:36 +01:00
Michael Heimpold
56fbb7f85e Merge pull request #18083 from mhei/21.02-libxml2-update
libxml2: update to 2.9.13
2022-03-17 21:06:52 +01:00
Michael Heimpold
8e9f102235 libxml2: update to 2.9.13
This fixes CVE-2022-23308.

Also switch to GNOME as download source and xz tarball.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 81fd836f97)
2022-03-17 08:06:45 +01:00
Daniel Golle
793e7ee484 auc: don't segfault on invalid URL
Show error message instead of segfaulting in case of an invalid URL
being read from UCI config.

Fixes: #17971
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c0d2c82528)
2022-03-14 21:29:50 +00:00
Daniel Golle
31e2e7ccb8 auc: fall back to 'sdcard' image
Fallback to use 'sdcard' image in case there is neither 'sysupgrade'
nor 'combined' image available.
This allows using 'auc' on targets where 'sdcard' image is also used
for sysupgrade (such as some mvebu-based devices with eMMC).

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 6b041752a0)
2022-03-14 21:29:50 +00:00
Daniel Golle
8999b60db9 auc: accept both 'y' and 'Y' as confirmation from user
Accept both 'y' and 'Y' as positive confirmation when asking the user
if auc should proceed with requesting and installing an upgrade.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit d27ecdcc49)
2022-03-14 21:29:50 +00:00
Daniel Golle
1adcda368e auc: add '-n' parameter for dry-run
Add option to allow only requesting an image but not actually download
or sysupgrade anything.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 19c135685f)
2022-03-14 21:29:50 +00:00
Paul Spooren
facfdaca20 attendedsysupgrade-common: update to 2021
* Use SPDX
* Use CA (ucert) public key
* Update repo link
* Update maintainer email
* Format description

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit a54b9570ad)
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-03-14 21:29:50 +00:00
Stan Grishin
44e763c62e Merge pull request #18010 from stangri/openwrt-21.02-curl
[21.02] curl: update to 7.82.0
2022-03-14 14:29:14 -07:00
Josef Schlehofer
85b7d29c3e Merge pull request #18037 from M95D/openwrt-21.02
tvheadend: bind to LAN IP by default
2022-03-14 17:57:29 +01:00
Tianling Shen
aa41482d38 yq: Update to 4.22.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b31615c63c)
2022-03-13 00:01:46 -08:00
Tianling Shen
8518b2d5d4 yq: Update to 4.21.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5529031602)
2022-03-13 00:01:46 -08:00
Josef Schlehofer
f550d90660 syslog-ng: update to version 3.36.1
- Bump version in config file

Release notes:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.36.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 110d46eb37)
2022-03-12 06:51:24 +01:00
Marius Dinu
b2ec8c84fd tvheadend: bind to LAN IP by default
If config parameter is not set, tvheadend will bind to LAN IP address by default.
Fixes issue #16500 without requiring user modifications to config file. It's also more secure if firewall becomes disabled.

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
(cherry picked from commit 95cbfe893b)
2022-03-10 10:43:44 +02:00
Liang Yang
e061d8eff4 dockerd: fix compilation with glibc
Signed-off-by: Liang Yang <ggg17226@gmail.com>
2022-03-09 02:15:07 -08:00
Liang Yang
fd30ce33f4 docker: fix compilation with glibc
Signed-off-by: Liang Yang <ggg17226@gmail.com>
2022-03-09 02:14:45 -08:00
George Iv
a11359b889 yggdrasil: bump to 0.4.3
Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>
(cherry picked from commit ed49a0bd3a)
2022-03-08 22:02:05 -08:00
R4SAS I2P
1d7d46db04 i2pd: Update package
* Update to 2.41.0
* Added use AUTORELEASE

Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
(cherry picked from commit c08bb2df62)
2022-03-08 21:59:33 -08:00
R4SAS I2P
c384dbb19b i2pd: add service reload support
Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
(cherry picked from commit b9000cf231)
2022-03-08 21:59:33 -08:00
Thibaut VARÈNE
938187fa2e coova-chilli: remove kmod dep on binary package
There is no reason for the kmod to depend on the binary package
itself, neither for building nor for installing.

That dependency prevents phase1 from building the kmod even though
support is enabled in the binary.

Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
(cherry picked from commit 385923321b)
2022-03-08 21:58:59 -08:00
Gerard Ryan
109f2770a1 cache-domains: Fixed hotplug script not running
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-03-08 21:55:35 -08:00
Stan Grishin
6df8f76efc Merge pull request #18019 from rs/nextdns-1.37.10-openwrt-21.02
[21.02] nextdns: Update to version 1.37.10
2022-03-07 13:35:41 -08:00
Josef Schlehofer
aef82c58d2 Merge pull request #18012 from jefferyto/golang-1.17.8-openwrt-21.02
[openwrt-21.02] golang: Update to 1.17.8
2022-03-07 21:40:24 +01:00
Olivier Poitrey
5562cef265 nextdns: Update to version 1.37.10
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2022-03-07 19:48:05 +00:00
Jeffery To
5f20a91711 golang: Update to 1.17.8
Includes fix for CVE-2022-24921 (regexp: stack overflow (process exit)
handling deeply nested regexp).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 9704e900da)
2022-03-07 15:44:40 +08:00
Stan Grishin
1a0cb5ce4a curl: update to 7.82.0
* changelog: https://curl.se/changes.html#7_82_0

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 38b3a5f857)
2022-03-07 07:16:40 +00:00
Jeffery To
701ca25325 python-twisted: Update to 22.2.0
Includes fix for CVE-2022-21716 (The Twisted SSH client and server
implementation naively accepted an infinite amount of data for the
peer's SSH version identifier.)

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 630d6800f2)
2022-03-06 23:37:33 +01:00
Jeffery To
4c07483961 python-twisted: Update to 22.1.0, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 9f3816d1c6)
2022-03-06 23:37:28 +01:00
Maarten Aertsen
3e75dc582e mdnsresponder: Fix nullpointer dereference while parsing interface list
This patch was backported from https://github.com/IETF-Hackathon/mDNSResponder/commit/1fb07b9524b4afed3a826c087db4dc48a7bfdb8

(cherry picked from commit a4b33ab169)
Signed-off-by: Maarten Aertsen <spam-github@rtsn.nl>
2022-03-06 13:08:52 +01:00
Josef Schlehofer
17a7ed325c Merge pull request #17986 from CyberMind-FR/crowdsec-firewall-bouncer-remove-crowdsec-depency
[21.02] crowdsec-firewall-bouncer: remove crowdsec package dependency
2022-03-04 14:12:25 +01:00
Kerma Gérald
9722b1ec0b crowdsec-firewall-bouncer: remove crowdsec package dependency
Remove un-necessary crowdsec package dependency, to be able to use
crowdsec-firewall-bouncer independently from crowdsec local installation.
(with remote API)

Fix issue: https://github.com/openwrt/packages/issues/17406

Description:
  using crowdsec-firewall-bouncer on many OpenWRT devices connected
  with my domain LAPI server (which collect many crowdsec machines,
  mostly nginx), it works great. Actually, crowdsec package is not
  mandatory for that usage, it would be great if it was not a dependency.

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
(cherry picked from commit ffd97e173c)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-03-04 13:53:47 +01:00
Chao Liu
5b51bb3a5e kcptun: bump to v20210922
Signed-off-by: Chao Liu <git@expiron.dev>
2022-03-02 16:31:47 -08:00
Rosen Penev
81ed00124b samplicator: fix Wformat warning
Wrong type.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 97cbb3d20a)
2022-02-28 11:52:05 +01:00
Nikos Mavrogiannopoulos
da82b8c9c8 ocserv: updated to 1.1.6
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-02-25 23:53:10 +01:00
Nikos Mavrogiannopoulos
a8b73c2505 openconnect: updated to 8.20
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-02-25 23:31:00 +01:00
Tianling Shen
e208f42c57 yq: Update to 4.20.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 7254169b12)
2022-02-24 14:33:16 -08:00
Josef Schlehofer
e2bf8e1d80 MarkupSafe: update to version 2.1.0
Changelog:
https://markupsafe.palletsprojects.com/en/2.1.x/changes/#version-2-1-0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 2d10b0836d)
2022-02-24 15:47:23 +01:00
Rosen Penev
41fe385fd0 domoticz: update to 2021.1
Remove outdated patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit edfb91f334)
2022-02-24 00:26:13 -08:00
Rosen Penev
e9dee2684b minizip: update to 3.0.2
Add back compat header as domoticz really wants it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 953e23b0e6)
2022-02-24 00:26:13 -08:00
Rosen Penev
697115688f minizip: update to 3.0.1
Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0ac671880d)
2022-02-24 00:26:13 -08:00
Rosen Penev
adc6fcc88c minizip: update to 3.0.0
Switch to new upstream and switch package name.

Further disable features to avoid extra dependencies.

Build with PIC to avoid build failures with mips16.

Remove no longer needed patch. Upstream fixed it differently.

Use AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3b812f93d6)
2022-02-24 00:26:13 -08:00
Michal Vasilek
584c0c4378 expat: import patches for CVEs
* import patches for CVEs from alpine 3.13

CVE-2021-45960, CVE-2021-46143, CVE-2022-22822, CVE-2022-23852, CVE-2022-23990
CVE-2022-25235, CVE-2022-25236, CVE-2022-25313, CVE-2022-25314, CVE-2022-25315

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-02-23 17:00:09 -08:00
W. Michael Petullo
5f3226dc14 nfdump: update to 1.6.23
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit a64e94bd46)
2022-02-23 23:03:55 +01:00
Jo-Philipp Wich
e7715b18bc htpdate: drop www.freebsd.org from default server list
The FreeBSD project stopped publishing HTTP date headers and seeks to
limit further resource taxing by distributed htpdate clients using the
www.freebsd.org host as default time source.

Fixes: #17924
Reported-by: Allan Jude <allanjude@freebsd.org>
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit e871318002)
2022-02-22 23:35:29 +01:00
Hannu Nyman
4d0e0f4141 nano: update to 6.2
Update nano to 6.2.
Remove inactive second maintainer.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit a3f14c5114)
2022-02-22 19:22:37 +02:00
Josef Schlehofer
45009c3408 unbound: update to version 1.15.0
Refresh patch

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 2abe98e134)
2022-02-20 00:47:59 +01:00
Tianling Shen
9ba9579a16 yq: Update to 4.20.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1578ea4383)
2022-02-19 15:35:02 -08:00
Michael Heimpold
abb5b988cb Merge pull request #17900 from mhei/21.02-php8-update
[21.02] php8: update to 8.0.16
2022-02-19 13:22:38 +01:00
Michael Heimpold
a675d0ca54 Merge pull request #17899 from mhei/21.02-php7-update
[21.02] php7: update to 7.4.28
2022-02-19 13:22:31 +01:00
Michal Hrusecky
a5de4042c1 pcapplusplus: Add new package
PcapPlusPlus is a multiplatform C++ library for capturing, parsing and
crafting of network packets. It is designed to be efficient, powerful
and easy to use. It provides C++ wrappers for the most popular packet
processing engines such as libpcap, WinPcap, DPDK and PF_RING.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit 2d8e396be3)
2022-02-19 11:34:59 +01:00
Josef Schlehofer
c29cdb2512 Merge pull request #17895 from jefferyto/slide-switch-0.9.7-openwrt-21.02
[openwrt-21.02] slide-switch: Update to 0.9.7
2022-02-18 23:43:52 +01:00
Jan Hoffmann
10a8054925 vnstat2: update to version 2.9
Signed-off-by: Jan Hoffmann <jan@3e8.eu>
(cherry picked from commit 948f0d29cc)
2022-02-18 23:25:59 +01:00
Jan Hoffmann
42f35cdda7 vnstat2: add hotplug script for adding interfaces
If an interface doesn't exist yet when vnStat is started, it won't be
monitored, as only existing interfaces can be added to the database via
the vnstat command.

This adds a hotplug script which adds any configured interfaces to the
vnStat database when it goes up.

Signed-off-by: Jan Hoffmann <jan@3e8.eu>
(cherry picked from commit f9ea814260)
2022-02-18 23:25:53 +01:00
Jan Hoffmann
f8820d2aeb vnstat2: fix all interfaces being monitored when none are configured
By default, vnstatd adds all available interfaces on startup when its
database is empty. The --noadd option prevents this, but it breaks
import of legacy databases, and causes vnstatd to exit immediately
after startup, which breaks reloading.

This changes the init script to add the --noadd option when no legacy
databases need to be imported, and patches vnstatd to keep running
even when no interfaces are configured.

Signed-off-by: Jan Hoffmann <jan@3e8.eu>
(cherry picked from commit ecae7dedde)
2022-02-18 23:25:49 +01:00
Jan Hoffmann
86f85cde4f vnstat2: update to version 2.8
Signed-off-by: Jan Hoffmann <jan@3e8.eu>
(cherry picked from commit 73fff7a4ed)
2022-02-18 23:25:44 +01:00
Michael Heimpold
f4a390c59b php7: update to 7.4.28
This fixes:
    - CVE-2021-21708

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-02-18 22:40:53 +01:00
Michael Heimpold
5eb97e05e2 php8: update to 8.0.16
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-02-18 22:36:10 +01:00
Jeffery To
b409127e6e slide-switch: Update to 0.9.7
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 12930f4ec3)
2022-02-19 03:36:48 +08:00
Hauke Mehrtens
b0ccc35690 Merge pull request #17866 from neheb/1
[21.02] ksmbd: update to 3.44
2022-02-17 17:57:20 +00:00
Jeffery To
4919a791ae golang: Update to 1.17.7, refresh patch
This includes fixes for:

* CVE-2022-23772: math/big: Rat.SetString may consume large amount of
  RAM and crash

* CVE-2022-23806: crypto/elliptic: IsOnCurve returns true for invalid
  field elements

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 69c53fcb6c)
2022-02-15 16:42:24 -08:00
Marius Dinu
43276c6494 tvheadend: fix first-run
The first-run command should create a new tvheadend configuration including an admin account with no name and no password, but it aborts (-A) too early without saving the files. I reported the bug here: https://tvheadend.org/issues/6140
This workaround fixes the problem by removing the tvheadend -A switch and replacing it with a 10s delay and a kill signal. That should be enough even for slow routers to generate and save the configuration. It is meant to be a temporary fix until tvheadend bug is resolved.

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
2022-02-15 13:07:16 -08:00
Rosen Penev
362c8c4df3 ksmbd-tools: update to 3.4.4
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3ffd540b04)
2022-02-14 19:54:11 -08:00
Georgi Valkov
41ca56ff2b ksmbd-tools: Fix ksmbd service is semi-killed at system startup
The configuration for the ksmbd service is auto-generated when
the OpenWRT configuration changes, and also during startup,
hence ksmbd.init has to reload the kernel module. It does that by
calling kill_server, which does not perform cleanup. This results
in ksmbd being killed but not restarted properly during boot.
This patch resolves the issue by using stop_service, which performs
proper cleanup.

https://forum.openwrt.org/t/ksmbd-samba3-4-alternative-ex-cifsd-smbd-package-support-thread/51695/68

Signed-off-by: Georgi Valkov <gvalkov@abv.bg>
(cherry picked from commit 4af04cdc05)
2022-02-14 19:54:11 -08:00
Rosen Penev
c4bb2fadc7 ksmbd: update to 3.4.4
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4adeed4879)
2022-02-14 19:51:24 -08:00
Marcos Del Sol Vives
06ffe5c4da ksmbd: update to 3.4.2
Signed-off-by: Marcos Del Sol Vives <marcos@orca.pet>
(cherry picked from commit 2b48a6952a)
2022-02-14 19:51:24 -08:00
Rosen Penev
c7e0be3a39 ksmbd: update to 3.4.1
Add AUTORELEASE as 19.07 compatibility is not needed.

Add dependency hacks and add comments.

Add upstream patch to get rid of FS_POSIX_ACL requirement.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c732305ad3)
2022-02-14 19:51:24 -08:00
Gerard Ryan
d5f5882681 dockerd: Update to 20.10.12
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-02-12 15:11:00 -08:00
Gerard Ryan
66dda3aa22 docker: Update to 20.10.12
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-02-12 15:11:00 -08:00
Tianling Shen
845d2203bd yq: Update to 4.19.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4454f8bb3e)
2022-02-10 15:58:52 -08:00
Rafał Miłecki
4e8267602b dtc: drop package
It has been imported as core package into OpenWrt repository. Its fdtget
is required by sysupgrade on U-Boot devices so it couldn't live in an
extra feed.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
(cherry picked from commit c8d4c89daa)
2022-02-10 23:23:21 +01:00
Jan Hák
845b9a1dfe knot: update to 3.1.6
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 4de863e418)
2022-02-10 02:00:36 +01:00
Jan Hák
d286939b73 knot: update to 3.1.5
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 2a56e478f5)
2022-02-10 02:00:30 +01:00
Hannu Nyman
38eaee3476 nano: update to 6.1
Update nano to version 6.1.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 717efb8c96)
2022-02-09 18:27:58 +02:00
Tianling Shen
0329b2c11d xray-core: Update to 1.5.3
Removed outdated `alterId` in sample config.

Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d8d261fe2d)
2022-02-07 21:26:22 -08:00
Michal Vasilek
d18542ecf7 ruby: update to 3.0.3
* fixes CVE-2021-41817, CVE-2021-41816 and CVE-2021-41819

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 51cf0dc2cc)
2022-02-06 08:54:38 -03:00
Stan Grishin
1431f6231c Merge pull request #17812 from stangri/openwrt-21.02
[21.02] https-dns-proxy: init script refactoring
2022-02-05 22:12:14 -08:00
Stan Grishin
a507620a18 https-dns-proxy: init script refactoring
* consolidate dnsmasq config manipulation into one function
* more elegant code for PROCD data processing (Thanks @jow-!)

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 88265c4fb9)
2022-02-06 06:01:00 +00:00
Jeffery To
5dcf0b57cd slide-switch: Update to 0.9.6
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit c5e0785795)
2022-02-05 08:18:06 -08:00
Josef Schlehofer
4bd6bc41c9 ffmpeg: update to version 4.3.3
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit a68e9db8d4)
2022-02-05 10:23:28 +01:00
Michal Vasilek
ac4ecdf85e tinyionice: add package
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit bb801a5a6f)
2022-02-04 15:36:15 +01:00
Tianling Shen
1a40a0a0b8 yq: Update to 4.18.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c665f0b50c)
2022-02-04 06:28:06 -08:00
Tianling Shen
32e85322c5 yq: Update to 4.17.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 029b37aad0)
2022-02-04 06:28:06 -08:00
Josef Schlehofer
68571069e1 Merge pull request #17737 from JonnyTischbein/telegraf-1.21.3-openwrt_21.02
telegraf: add package version 1.21.3 to openwrt 21.02
2022-02-03 16:24:02 +01:00
Josef Schlehofer
675755537a apache2: security update to version 2.4.52
Fixes CVEs:
- CVE-2021-44790
- CVE-2021-44224

Refreshed patches

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 6c6c99ffb5)
2022-02-03 12:57:17 +01:00
Noah Meyerhans
74f9ae0286 bind: bump to 9.18.0
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit 127ef1207b)
2022-02-02 09:20:10 -08:00
Stan Grishin
b7374630e1 Merge pull request #17764 from stangri/openwrt-21.02
[21.02] https-dns-proxy: update to 2021-11-22-1
2022-02-02 09:12:45 -08:00
Kerma Gérald
b29655996d crowdsec: update from latest upstream release 1.3.0
Changes (from 1.2.3):
https://github.com/crowdsecurity/crowdsec/compare/v1.2.3...v1.3.0

(cherry picked from commit d2fd1f8346)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-02-02 07:24:22 -08:00
Nick Hainke
3b28c6f389 wg-installer: use babeld add_interface function
With commit 385200443554 ("babeld: add add_interface function") babeld
has a new ubus function allowing to dynamically add an interface.

Before the add_interface function, we were required to reload babeld.
The reload influenced the babeld routing. However, the remove part is
still missing and will be added at a later stage.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 40b87aac95)
2022-02-02 11:10:19 +01:00
Kerma Gérald
1026a1fd4e crowdsec-firewall-bouncer: fix name in initd to start the process
crowdsec rename the binary from crowdsec-firewall-bouncer to cs-firewall-bouncer
the initd need the correct binary name to start the process
the link for github source need also to be fixed (only the information one)
fix the BuildDate
updated copyright

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
(cherry picked from commit d6b116cb43)
2022-02-02 08:09:01 +01:00
Hannu Nyman
9137583d3d nano: Add a plus variant with more features
Nano is by default built as "tiny" with most features disabled.
That is suitable for basic tasks in routers with small flash.

Add a new nano-plus variant that enables selected additional
features in the build config:
 * multiple files (multibuffer)
 * Unicode/utf8
 * justify
 * .nanorc support
 * help
 * also some key bindings get enabled as "tiny" configure option
   is removed.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 85cb71d8d8)
2022-02-01 23:41:59 +02:00
Stan Grishin
2cd8928796 https-dns-proxy: update to 2021-11-22-1
* update to 2021-11-22 upstream source
* update patch file
* update init script to preserve manual entries
	(fixes https://github.com/stangri/source.openwrt.melmac.net/issues/149)
* update init script service_triggers

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 1e5e7ce469)
2022-01-31 22:36:27 +00:00
Nick Hainke
8d8cf26286 dawn: update to 2022-01-17
877e2dc iwinfo: fix get_bandwidth_iwinfo
9ce01ec datastorage: fix multi-SSID
9187665 treewide: improve maintaince
6bf9b6d memory: Tighten up some memory handling to help spot errors
4df0c98 treewide: improve logging

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 7cb73ae3b9)
2022-01-31 15:40:38 +01:00
Josef Schlehofer
f921cc4b74 python-dns: update to version 2.1.0
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 447c6fd57b)
2022-01-31 06:26:58 +01:00
Josef Schlehofer
df7568303b prosody: update to version 0.11.13
Fixes CVEs:
- CVE-2022-0217
- CVE-2021-37601
- CVE-2021-32918
- CVE-2021-32920
- CVE-2021-32921
- CVE-2021-32917
- CVE-2021-32919

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit dcedbe8027)
2022-01-31 00:05:03 +01:00
Jonathan Pagel
14b623f73f telegraf: Update package to version 1.21.3
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 912bb2c803)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-01-31 00:00:08 +01:00
Jonathan Pagel
82c35fa92f telegraf: Move config file to /etc/telegraf.conf because
/etc/config is the default uci folder. Also marking it as
configuration file prevents overwriting it on updates.

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit abb33331e5)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-01-30 23:59:33 +01:00
Jonathan Pagel
989aecf2bb telegraf: Add package for telegraf
Telegraf is a plugin-driven agent for collecting and sending metrics
and events. It supports various inputs (including prometheus
endpoints) and is able to send data into InfluxDB.
https://www.influxdata.com/time-series-platform/telegraf/

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 0781a15c93)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-01-30 23:59:25 +01:00
Bernd Kuhls
299684dd5c ffmpeg: update to 4.3.2
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
(cherry picked from commit 900a146de3)
2022-01-29 11:30:18 +01:00
Josef Schlehofer
213aaa1f32 clamav: update to version 0.104.2
Backported upstream pending pull request to fix following error:

CMake Error at /foo/staging_dir/host/share/cmake-3.19/Modules/FindPackageHandleStandardArgs.cmake:218 (message):
  Could NOT find CURSES (missing: CURSES_LIBRARY)

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit eddbb64bc9)
2022-01-28 17:35:19 +01:00
Lucian Cristian
9c476ee993 clamav: update to 0.104.0
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 44eb2ae619)
2022-01-28 14:16:35 +01:00
Hirokazu MORIKAWA
2941963033 node: January 10th 2022 Security Releases
Update to v14.18.3

January 10th 2022 Security Releases:
Improper handling of URI Subject Alternative Names (Medium)(CVE-2021-44531)
Certificate Verification Bypass via String Injection (Medium)(CVE-2021-44532)
Incorrect handling of certificate subject and issuer fields (Medium)(CVE-2021-44533)
Prototype pollution via console.table properties (Low)(CVE-2022-21824)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 8278998e48)
2022-01-25 09:50:18 +01:00
Josef Schlehofer
fc835bcaac tvheadend: fix conffiles section
The previous one was wrong, and it did not work. It could be checked
inside compiled package in control.tar.gz that there was missing
``conffiles`` file with content `/etc/config/tvheadend`

It is also possible to verify that the config is not overwritten on the router
by running ``opkg install tvheadend --force-reinstall``

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 752d1ffc28)
2022-01-25 09:00:53 +01:00
Glenn Strauss
48bf1a0d0d lighttpd: update to lighttpd 1.4.64 release hash
remove long-deprecated modules

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 3badd76668)
2022-01-24 15:19:03 +01:00
Glenn Strauss
82339309f5 lighttpd: update to lighttpd 1.4.63 release hash
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 35dff58b3a)
2022-01-24 15:18:59 +01:00
Glenn Strauss
527f2b920f lighttpd: update to lighttpd 1.4.62 release hash
depend on libpcre2 instead of libpcre

also remove patches incorporated upstream into lighttpd 1.4.62

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit ddecac45c8)
2022-01-24 15:18:54 +01:00
Josef Schlehofer
4f990b7cd6 tvheadend: fix typo in uriparser
Fixes: 0449c109e7 ("tvheadend: disable
uriparser")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5879260515)
2022-01-24 12:25:45 +01:00
Michael Heimpold
aa2c1a9937 Merge pull request #17677 from mhei/21.02-php8-update
[21.02] php8: update to 8.0.15
2022-01-24 07:45:04 +01:00
Nick Hainke
aeb8aad5c0 wg-installer: fix multiple namespaces
Add flag "--lookup-default-namespace" to signal that wg-installer should
look already established wireguard sessions in the default namespace.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 94efdcf02a)
2022-01-23 18:09:51 +01:00
Michael Heimpold
e29f386508 php8: update to 8.0.15
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-01-22 21:24:37 +01:00
Josef Schlehofer
d7c78f83be tvheadend: disable uriparser
This avoids to add liburiparser as dependency.

Package tvheadend is missing dependencies for the following libraries:
liburiparser.so.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 0449c109e7)
2022-01-22 14:37:57 +01:00
Jeffery To
c7f25b25df python3: Update to 3.9.10, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-01-20 20:48:55 -08:00
Nick Hainke
b9bfe1ef15 wg-installer: remove unused dependency
Remove the dependency "coreutils-realpath" from
wg-installer-server-hotplug-olsrd.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit fab86eb626)
2022-01-20 22:22:53 +01:00
Nick Hainke
9a836f4307 wg-installer: create wireguard key if it does not exist
Check if the key exists which is given by
    option wg_key '/etc/wgserver/wg.key'

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 324fa79d7c)
2022-01-20 15:12:22 +01:00
Nick Hainke
317ba6a43e wg-installer: install cronjob
Install a cronjob that removes unused wireguard interfaces every 10
minutes.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 432a965689)
2022-01-20 13:57:46 +01:00
Nick Hainke
a430932a7d wg-installer: check if a key is already inserted
Check if a peer is already existing with a given public key. Introduce a
response code for signaling why the server rejected the request.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit da48bc3792)
2022-01-20 13:57:46 +01:00
Nick Hainke
0aaa90629c wg-installer: rework code
Use shellcheck to rework the code. Use "export" to return variables from
a function call. Further, fix typos.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 69c81790d1)
2022-01-20 13:57:46 +01:00
Nick Hainke
dea64c08ea wg-installer: cosmetic changes
Use "ip addr" instead of "ip addres" or "ip a".

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 38a9a3e0dc)
2022-01-20 13:57:46 +01:00
Josef Schlehofer
444b64e36c cryptsetup: update to version 2.4.3
Fixes: CVE-2021-4122

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit a2427edf76)
2022-01-19 11:20:07 +01:00
Josef Schlehofer
a259a4aaaa git: update to version 2.34.1
- Refreshed patches

- Release notes 2.34.0:
2ae0a9cb82/Documentation/RelNotes/2.34.0.txt

- Release notes 2.34.1:
2ae0a9cb82/Documentation/RelNotes/2.34.1.txt

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 042bf16072)
2022-01-19 11:20:01 +01:00
Kerma Gérald
0cdffbaf95 crowdsec: update from upstream latest release 1.2.3
update from latest upstream release 1.2.3
updated copyright

(cherry picked from commit de41b63ca4)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-01-18 18:06:54 -08:00
Moritz Warning
031fbb16a3 smcroute: update to 2.5.5
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-01-17 21:08:50 -08:00
Moritz Warning
fcf1633351 smcroute: update to 2.5.4
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-01-17 21:08:50 -08:00
Jeffery To
0a250df810 Merge pull request #17619 from erdoukki/21.02-2to3
[21.02] 2to3: add package host tool
2022-01-17 19:10:26 +08:00
Nick Hainke
c7470d1d8e wg-installer: switch to ubus call for olsrd hotplug
Use ubus ipc calls to add and remove interfaces.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit b89eb0115f)
2022-01-17 09:42:06 +01:00
Nick Hainke
8c3ce87fd2 wg-installer: rework iproute2 commands
- Use ip address add instead of ip a a
- Directly add broadcast address

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit fea27cec05)
2022-01-17 09:42:06 +01:00
Kerma Gérald
3f88edfa54 2to3: add package host tool
2to3 is a Python program that reads Python 2.x source code and applies a
  series of fixers to transform it into valid Python 3.x code. The standard
  library contains a rich set of fixers that will handle almost all code. 2to3
  supporting library lib2to3 is, however, a flexible and generic library, so it
  is possible to write your own fixers for 2to3. lib2to3 could also be adapted
  to custom applications in which Python code needs to be edited automatically.

This tool is necessary for fail2ban package because of issue
  https://github.com/openwrt/packages/issues/17311
  https://github.com/openwrt/packages/pull/17341

Simple 2to3.py script from Debian, thanks to Matthias Klose <doko@ubuntu.com>
From: https://salsa.debian.org/cpython-team/python3-defaults

(cherry picked from commit 2f91e1c9c5)
Co-authored-by: Jeffery To <jeffery.to@gmail.com>
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-01-15 20:53:30 +01:00
Paul Spooren
bb09bc37b2 CI: fix runtime testing for non master branch
The runtime testing always ran on master branch aka snapshots since the
branch wasn't passed over to the container execution!

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit f535d77090)
2022-01-15 11:30:59 +01:00
R4SAS I2P
bbd3d70cd4 i2pd: Update to 2.40.0 and update package sources
* Updating i2pd package to 2.40.0
* Rewrite Makefile
* Remove usage of PKG_INSTALL (package's make install)
* Rewrite init.rc configuration and script
* Remove '--service' option from init, which only sets datadir to /var/lib/i2pd
* Use '--datadir' option in init, otherwise datadir changing via uci is not works
* Update patch for i2pd.conf

Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
(cherry picked from commit ac27fffff9)
2022-01-15 09:02:21 +01:00
Dirk Neukirchen
19d32003c2 i2pd: remove unneeded functions.sh
its included via rc.common, see
https://openwrt.org/docs/guide-developer/config-scripting

Signed-off-by: Dirk Neukirchen <plntyk.lede@plntyk.name>
(cherry picked from commit 266deb5866)
2022-01-15 09:02:15 +01:00
R4SAS I2P
8d150985c4 i2pd: Update to 2.38.0
Remove USE_AVX and USE_AESNI make options as it is correclty handled by
internal code.

Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
(cherry picked from commit 1025dd7c76)
2022-01-15 08:59:38 +01:00
Dirk Neukirchen
5ee9fb98dd i2pd: update to 2.36
remove AVX patches as upstream has integrated and closed
all AVX issues

compiled on :  x86-64, i386 generic
tested on : x86-64 VM, i386 VM

Signed-off-by: Dirk Neukirchen <plntyk.lede@plntyk.name>
(cherry picked from commit fc7d710e62)
2022-01-15 08:59:34 +01:00
Michal Hrusecky
d0bb487412 mariadb: Add sudo dependency
During update we use sudo to start an instance. It probably could be
workarounded, but given the MariaDB size, dependency on sudo shouldn't
be an issue.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit 0ffec9bd4b)
2022-01-14 16:30:25 +01:00
Michal Hrusecky
f4d8f9c98f mariadb: Check and fix datadir owner issues during upgrade
If you are migrating to MariaDB package, you might have old datadir
stored somewhere using different setup with different users. If you
trust us enough to enable autoupgrade, you probably trust us enough to
chown your datadir as well. This can prevent some potential issues.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit b41525cef4)
2022-01-14 16:28:29 +01:00
Josef Schlehofer
e86528676b Merge pull request #17603 from BKPepe/mariadb-bump
mariadb: update to version 10.4.22
2022-01-14 13:14:53 +01:00
Josef Schlehofer
7a3f41af4d mariadb: update to version 10.4.22
Fixes: CVE-2021-35604

Removed two patches:
130-c11_atomics.patch - included in upstream now [1]
140-mips-connect-unaligned.patch - included in upstream, too. [2]

[1] f502ccbcb5 (diff-6ef8fc82162068daeab927be94e246b202eb39323a102273b9448219da24172f)
[2] a33c1082da (diff-821e2c7a49184a660339b094f437fcd1e9aea997a86391467a657088234ebca0)

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-01-13 14:52:05 +01:00
Hirokazu MORIKAWA
d3e6dc51ee mg: bump to 7.0
This is mg as it appears in OpenBSD 7.0.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-01-13 10:41:20 +01:00
Jo-Philipp Wich
15b41a6751 zerotier: add configuration reload trigger
Ensure that the zerotier service is automatically restarted when the uci
configuration is modified.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 04d0e45da1)
2022-01-13 10:40:32 +01:00
James White
2bca94d83e netdata: Update init script to use -D rather than -nd
The current init script is using the deprecated -nd flag. This updates netdata to be started with -D.

Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit cf9d5a8870)
2022-01-13 10:39:28 +01:00
Josef Schlehofer
c7fef6db56 atlas-probe: update to version 2.4.1
Removed patches:
001-fix-stime-glibc-remove.patch - it is included in upstream
003-Fix-compilation-with-gcc11.patch - no longer necessary

Updated patches:
002-Avoid-problems-with-64-bit-time_t.patch

Refreshed patches:
004-Comment-out-librt-testing.patch

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit cf65ca2db0)
2022-01-13 10:18:10 +01:00
Josef Schlehofer
98c1fe435c atlas-sw-probe: update to version 5040
Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ec767eb499)
2022-01-13 10:17:53 +01:00
Kerma Gérald
1a40e3c89c crowdsec-firewall-bouncer: update to 0.0.21
Update crowdsec-firewall-bouncer to latest upstream release version 0.0.21

Makefile rework
- use tagged version for download

Fixes
- set API_KEY in firewall bouncer config file

(cherry picked from commit b4f48b5c23)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-01-13 10:15:11 +01:00
Kerma Gérald
432140a36e crowdsec: update to 1.2.2
Update crowdsec to latest upstream release version 1.2.2

Makefile rework
- use tagged version for download

(cherry picked from commit 2a34e4987b)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-01-13 10:15:01 +01:00
Sebastian Kemper
b5443ccdf0 apache: fixup apxs
apxs is used to get information about the apache installation when
building external modules. Currently there are issues:

1.

./staging_dir/target-mips_24kc_musl/usr/bin/apxs -q TARGET
apache2
apxs:Error: ./staging_dir/target-mips_24kc_musl/home/sk/tmp/openwrt/staging_dir/target-mips_24kc_musl/usr/bin/apr-1-config not found!.

This error is fixed by sed script #2.

2.

./staging_dir/target-mips_24kc_musl/usr/bin/apxs -q TARGET
cannot open ./staging_dir/target-mips_24kc_musl/home/sk/tmp/openwrt/staging_dir/target-mips_24kc_musl/usr/share/apache2/build/config_vars.mk: No such file or directory at ./staging_dir/target-mips_24kc_musl/usr/bin/apxs line 213.

This error is fixed by sed scipt #1.

Both sed scripts taken from buildroot (see [1]).

[1] https://github.com/buildroot/buildroot/blob/master/package/apache/apache.mk

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 83d1cdaf3f)
2022-01-13 10:10:49 +01:00
Sebastian Kemper
19451ec864 apache: security bump to 2.4.51
Fixes (see [1] for details):

  CVE-2021-33193
  CVE-2021-41524
  CVE-2021-41773
  CVE-2021-42013

[1] https://httpd.apache.org/security/vulnerabilities_24.html

Patch 020-openssl-deprecated.patch refreshed.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit da4b1ca8d6)
2022-01-13 10:10:45 +01:00
Nick Hainke
6fe1b64e7a wg-installer: fix shell typo
Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 53503c4a3a)
2022-01-12 22:43:41 +01:00
Nick Hainke
f21f39cfd8 wg-installer: allow defining link costs for hotplugs
Add options to set link costs in mesh routing daemons.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit ee879d3747)
2022-01-12 18:28:12 +01:00
Nick Hainke
9952517460 wg-installer: private key as parameter
Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 6a59d41fbf)
2022-01-12 09:13:29 +01:00
Nick Hainke
652ebf1a33 wg-installer: generate new keys for every connection
Generate new keys on every new connection.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 8ab044712a)
2022-01-12 09:13:29 +01:00
Jeffery To
5f517cc584 golang: Update to 1.17.6
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 45208db29b)
2022-01-11 16:23:10 -08:00
Nick Hainke
92e357ebd8 wg-installer: fix using symlinks for conf files
It is useful to symlink babeld and olsrd to /tmp/ if we frequently
write to those config files.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 5e8301d7dc)
2022-01-11 00:52:40 +01:00
Kerma Gérald
caa72e5c54 fail2ban: fix 2to3 error
Issue: 2to3 support has been removed in setuptools since version 58.0.0.

Fix: openwrt/packages#17311

Requirements: 2to3/host openwrt/packages#17429

Add upstream patch: 196c55e931

To install/build for python3 from source, it is necessary to convert to py3
codebase before setup (invoke 2to3 or ./fail2ban-2to3 firstly).
> ./fail2ban-2to3
> python3 setup.py build

(cherry picked from commit ad0e1a1c3c)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-01-10 21:54:33 +01:00
Nick Hainke
b3764db33c wg-installer: fix cleanup script
The wrong function was called.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit e6afcf8f3c)
2022-01-10 14:15:28 +01:00
Hannu Nyman
1e179f92a3 haveged: update to 1.9.17
Update havged to version 1.9.17.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit e065ccda94)
2022-01-09 19:01:45 +02:00
Nick Hainke
d364552774 wg-installer: fix get_usage function
The get_usage function always returns 0. The shell syntax was wrong.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit f7cb8b20e1)
2022-01-09 14:13:06 +01:00
Nick Hainke
49f898044c wg-installer: delete old interfaces
Add "wg_check_interfaces" and specify a timeout in the config file.
This allows to delete not used wireguard-interfaces automatically.

For example a cronjob can be installed that calls:
  . /usr/share/wginstaller/wg_functions.sh && wg_check_interfaces

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 36dc9b3f79)
2022-01-09 14:13:06 +01:00
Nick Hainke
335ad2a4d7 wg-installer: fix dependencies
Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 62cc627aba)
2022-01-09 14:13:06 +01:00
Nick Hainke
f2745c85a2 wg-installer: fix typo in cleanup function
The delete variable was misspelled leading to devices always being
removed although they had connected neighbors.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 0e416dadd1)
2022-01-09 13:49:19 +01:00
Nick Hainke
1de352b603 wg-installer: fix ipv4 meshing via olsr
The ipv4 address space was not allowed.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 4302bfd3c8)
2022-01-09 12:20:18 +01:00
Nick Hainke
efb5bdf073 wg-installer: add link-local to client interface
Wireguard has no link-local address on an interface automatically.
Add a link-local to the interface. The server has fe80::1/64 and
the client fe80::2/64.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 625f3c8302)
2022-01-09 12:20:18 +01:00
Nick Hainke
bf1c780af4 wg-installer: add cleanup script
Add script to cleanup unused wireguard interfaces.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 714b51c630)
2022-01-09 10:43:34 +01:00
Nick Hainke
032d0157c3 wg-installer: add ipv4 support
Add base_v4prefix to allow ipv4 mesh connections.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 98d8680a8c)
2022-01-07 08:23:10 +01:00
Jonathan G. Underwood
33d6705d2f getdns: remove maintainer
Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
(cherry picked from commit 4a241581ab)
2022-01-07 00:40:32 +01:00
Rui Salvaterra
b1dfbf975b getdns: bump to 1.7.0
Remove obsolete patches.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 0261cd0972)
2022-01-07 00:40:26 +01:00
Josef Schlehofer
c8ebb1c989 Merge pull request #17504 from jefferyto/radicale2-2.1.12-openwrt-21.02
[openwrt-21.02] radicale2: Update to 2.1.12
2022-01-06 23:16:27 +01:00
Josef Schlehofer
335c2f80b1 Merge pull request #17503 from jefferyto/radicale-1.1.7-openwrt-21.02
[openwrt-21.02] radicale: Update to 1.1.7
2022-01-06 23:16:24 +01:00
Nick Hainke
f755690b0e wg-installer: add hotplug script for olsr
Add hotplug-olsrd to automatically mesh with olsrd via new wireguard
links.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit d35c22951b)
2022-01-06 22:44:48 +01:00
Jeffery To
85b6d750dd radicale2: Update to 2.1.12
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit b37f409146)
2022-01-05 19:28:02 +08:00
Jeffery To
2415cbb9b7 radicale: Update to 1.1.7
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8d0018f549)
2022-01-05 19:26:05 +08:00
Rosen Penev
4e1bfe4e9d inadyn: update to 2.9.1
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b434cd71b9)
2022-01-03 18:04:10 -08:00
Josef Schlehofer
ab94e0709a Merge pull request #17447 from jefferyto/golang-1.17.5-openwrt-21.02
[openwrt-21.02] golang: Update to 1.17.5, add patch
2021-12-29 18:35:09 +01:00
Florian Eckert
7a15a271a6 mwan3: fix mwan3 flush conntrack table call
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit e1f321150d)
2021-12-29 14:17:24 +01:00
Jeffery To
2f52958e02 golang: Update to 1.17.5, add patch
Includes fixes for:
* CVE-2021-44716: unbounded growth of HTTP/2 header canonicalization
  cache
* CVE-2021-44717: syscall.ForkExec error can close file descriptor 0

Added patches:
* 001-cmd-link-use-gold-on-ARM-ARM64-only-if-gold-is-available.patch:
  https://github.com/golang/go/pull/49748 backported for Go 1.17,
  this removes the requirement for the gold linker when building Go
  programs that use Go plugins on arm/arm64

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit eac2e91a28)
2021-12-28 15:17:20 +08:00
Hiếu Lê
f7973fc7af adguardhome: update to 0.107.0
Full changelog available at: https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.0

packr has been removed from build dependencies, per
c6888326b0 (diff-2873f79a86c0d8b3335cd7731b0ecf7dd4301eb19a82ef7a1cba7589b5252261L2)

Also added the ability to configure working directory location and moved
the directory to /var. On most setups this should not change anything,
as /var is symlinked to /tmp. The move mostly benefits setups where /var
is configured to be persistent.

The working directory is used by AdGuard to store persistent data like
query logs, filter lists, etc.

Data stored in this directory can get really huge, as such allowing
this directory to be moved elsewhere (ie. an USB drive) is very
beneficial.

Fixes: #17437

Co-authored-by: Dobroslaw Kijowski <dobo90@gmail.com>
Co-authored-by: Jeffery To <jeffery.to@gmail.com>
Signed-off-by: Hiếu Lê <leorize+oss@disroot.org>
(cherry picked from commit f44603a131)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[Added fixes in the commit message]
2021-12-27 09:32:36 +01:00
Josef Schlehofer
2eb96bdd4e Merge pull request #17439 from 1715173329/xr-2102
[openwrt-21.02] xray-core: Update to 1.5.2
2021-12-27 09:30:10 +01:00
Josef Schlehofer
de2186b137 Merge pull request #17438 from 1715173329/yq21
[openwrt-21.02] yq: Update to 4.16.2
2021-12-27 09:30:01 +01:00
Tianling Shen
d5ce7603dd xray-core: Update to 1.5.2
Removed upstreamed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 418e59356b)
2021-12-27 14:49:09 +08:00
Tianling Shen
60419af876 xray-core: Update to 1.5.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 6d56c80ff9)
2021-12-27 14:49:05 +08:00
Tianling Shen
c8b6cffcd7 yq: Update to 4.16.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c47425fe29)
2021-12-27 14:46:27 +08:00
Dirk Brenken
a21e790948 adblock: 4.1.3-4
* fix backup dir creation in raw mode

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 25dd0c63af)
2021-12-22 13:22:56 +01:00
Alexandru Ardelean
a877527123 python-lxml: update to version 4.6.5
Fixes: CVE-2021-43818
  https://nvd.nist.gov/vuln/detail/CVE-2021-43818

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-12-21 14:39:09 +01:00
Michael Heimpold
b05719feec Merge pull request #17405 from mhei/21.02-php8-update
[21.02] php8: update to 8.0.14
2021-12-21 10:49:02 +01:00
Michael Heimpold
944e937d93 php8: update to 8.0.14
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-12-20 16:44:29 +01:00
Alexandru Ardelean
93fa9960c6 Merge pull request #17400 from jefferyto/remove-commodo-openwrt-21.02
[openwrt-21.02] python-packages/seafile: Remove commodo as maintainer
2021-12-20 13:04:59 +02:00
Alexandru Ardelean
4308764d8a seafile: remove myself as maintainer of these packages
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 1e27dd7f8f)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-12-20 17:59:02 +08:00
Alexandru Ardelean
aa7454e461 python-packages: remove myself as maintainer
There's been a bit of overlapping opinions on some of these packages.
The best thing to do here is to reduce ownership and relinquish my
control.

This patch does that.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 48ce6e48b6)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-12-20 17:55:44 +08:00
Kerma Gérald
f01af1e66f crowdsec-firewall-bouncer: update to 0.0.18
Update to upstream release 0.0.18

(cherry picked from commit 515f8489cc)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2021-12-19 14:46:01 +01:00
Michael Heimpold
87ffda7784 Merge pull request #17356 from mhei/21.02-php7-update
[21.02] php7: update to 7.4.27
2021-12-18 10:08:59 +01:00
Michael Heimpold
f4519023c8 php7: update to 7.4.27
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-12-16 21:59:52 +01:00
Hannu Nyman
e818e3ed37 nano: update to version 6.0
Update nano editor to version 6.0

Version 6.0 enable toggling the display of the line numbers with
the shortcut key M-N (Alt-n). Also the cmdline option "-l" works.
Remove earlier patch regarding that.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 0571f5400d)
2021-12-16 20:26:45 +02:00
Florian Eckert
e7e91ca071 libqmi: fix missing CONFIG_ prefix
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 43a0f68940)
2021-12-15 12:18:08 +01:00
Eric Luehrsen
7164762fd9 ldns: update to 1.8.1
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry picked from commit 7594e8581a)
2021-12-12 19:30:55 +01:00
Eric Luehrsen
59e70a29cc unbound: update to 1.14.0
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2021-12-12 09:40:08 +01:00
John Audia
e6628357a5 htop: update to 3.1.2-1
Build-tested: x86/64
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <graysky@archlinux.us>
(cherry picked from commit 3b041e3b45)
2021-12-10 18:57:34 +02:00
Etienne Champetier
c28d3dcb51 htop: explicitly disable some build options
Since 3.1.0 delayacct option is enabled if the needed dependencies
are detected, it was previously disabled.
Sensors also check for dependency so we need to explicitly
disable it when not enabled.

Fixes 5f91672055

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 253e3f558c)
2021-12-10 18:57:10 +02:00
Hannu Nyman
97574e9de2 htop: update to 3.1.0
Update htop to versio 3.1.0

* Adjust Makefile configuration options to update
* Avoid libcap dependency
* Backport post-release fix for old automake

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 5f91672055)
2021-12-10 18:56:55 +02:00
Josef Schlehofer
386eb541d2 Merge pull request #17299 from nxhack/2102_node_14182
[21.02] node: bump to 14.18.2
2021-12-10 14:29:15 +01:00
Hirokazu MORIKAWA
6ddb16bc32 node: bump to 14.18.2
Update to v14.18.2

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-12-10 20:27:30 +09:00
Josef Schlehofer
916247d7bd Merge pull request #17270 from BKPepe/update-python3
python3: update to version 3.9.9
2021-12-10 11:20:41 +01:00
Josef Schlehofer
4f251d6dfc hwdata: update to version 0.354
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 20a759a6dd)
2021-12-09 02:05:26 +01:00
Josef Schlehofer
92129f9cfe python-babel: update to version 2.9.1
Changelog:
https://github.com/python-babel/babel/releases/tag/v2.9.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e2932db1ce)
2021-12-08 23:35:48 +01:00
Josef Schlehofer
134bae3026 python-babel: update to version 2.9.0
Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit a31dc44d2d)
2021-12-08 23:35:44 +01:00
Jan Hák
5750f83376 knot: update to 3.1.4
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 60a80b31fb)
2021-12-07 22:59:21 +01:00
Eneas U de Queiroz
149c3014f7 gnutls: don't run aclocal --install
Remove the --install parameter when running aclocal.  The --install
argument is used to copy third-party files to the first -I directory.
gnutls has -I m4 first, which would copy files to its local build
directory.  However, openwrt prepends the staging dir m4 directory,
causing aclocal --install to copy an old definition of
ax_code_coverage.m4 into the staging dir.

If strace is built after gnutls, compilation will fail:

    Makefile:9303: *** missing separator.  Stop.

The version of ax_code_coverage.m4 that gets installed does not define
@CODE_COVERAGE_RULES@.

Removing the --install parameter in gnutls solves the issue.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 206eaae165)
2021-12-07 22:58:38 +01:00
Noah Meyerhans
4ee0319063 bind: bump to 9.17.20
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit 249079187d)
2021-12-07 22:55:51 +01:00
Josef Schlehofer
cbc9de5f1d knot-resolver: update to version 5.4.3
Release notes:
https://www.knot-resolver.cz/2021-12-01-knot-resolver-5.4.3.html

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 10ab230670)
2021-12-07 22:54:34 +01:00
Tianling Shen
bb89205f5a yq: Update to 4.16.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0f46facfdb)
2021-12-06 12:38:12 -08:00
Josef Schlehofer
1743adc23f python3: update to version 3.9.9
- Updated setuptools and pip
- Refreshed patches

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-12-04 23:15:27 +01:00
Josef Schlehofer
5ebaa73d5e msmtp: update to version 1.8.1.9
Changelog:
https://marlam.de/msmtp/news/msmtp-1-8-19/

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 173faad334)
2021-12-04 09:24:29 +01:00
Stan Grishin
e2f8ba9b58 Merge pull request #17259 from rs/nextdns-1.37.7-openwrt-21.02
[21.02] nextdns: Update to version 1.37.7
2021-12-03 11:16:20 -08:00
Michal Hrusecky
a9fed2403c mariadb: Create compatibility symlinks
For every mysql* binary create corresponding mariadb binary and vice
versa.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit 2295c351ed)
2021-12-03 14:29:28 +01:00
Michal Hrusecky
0e40e25fc7 mariadb: Install all supporting sql files
Do not pick just few random SQL files to install, install all of them.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit 4653d83048)
2021-12-03 14:29:24 +01:00
Michal Hrusecky
753fe1d21d mariadb: Tweak default configuration
Remove from default configuration options that are compiled in like
default paths and character set. On the other hand add few examples of
tweak options that might be handy.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit a2c1a57282)
2021-12-03 14:29:19 +01:00
Michal Hrusecky
ed572e3898 mariadb: Init script improvements
Update init script so other user/group can be used. Also make sure that
init script can actually create an empty database instead of forcing the
user to do it by hand. Other new feature is taking care of migration
of the database when upgrading the database.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit 1be35284bb)
2021-12-03 14:29:07 +01:00
Michal Hrusecky
fb4c9e5c48 mariadb-common: Drop package and adjust configuration
The raison d'être of package mariadb-common was to provide common my.cnf
config file that was being used to include subdirectories and then to
push utf-8 as default everywhere. Let's make this file part of the
server package as there we actually set other options as well and drop
it from all clients. Instead let's set utf-8 as default in server,
client and client libraries. While at it also set socket to the more
common path and drop mysqld_safe script from the list of configuration
files and do other minor tweaks.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit d8ecded02d)
2021-12-03 14:29:02 +01:00
Olivier Poitrey
e84c488904 nextdns: Update to version 1.37.7
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-12-02 23:46:52 +00:00
Stan Grishin
d8a3dadcdd Merge pull request #17254 from rs/nextdns-1.37.6-openwrt-21.02
[21.02] nextdns: Update to version 1.37.6
2021-12-02 12:43:27 -08:00
Olivier Poitrey
75a0ffc21f nextdns: Update to version 1.37.6
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-12-02 15:03:49 +00:00
Josef Schlehofer
a97bd31353 syslog-ng: update to version 3.35.1
Also bump the version in syslog-ng config file.
Removes this warning:

Nov 16 14:19:41 turris syslog-ng[15159]: WARNING: Configuration file format is too old, syslog-ng is running in compatibility mode. Please update it to use the syslog-ng 3.35 format at your time of convenience. To upgrade the configuration, please review the warnings about incompatible changes printed by syslog-ng, and once completed change the @version header at the top of the configuration file; config-version='3.33'

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 2d2fd36e28)
2021-11-30 23:58:06 +01:00
George Iv
3cad5b76d0 yggdrasil: bump to 0.4.2
Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>
2021-11-30 13:14:58 -08:00
William Fleurant
a7a724733f yggdrasil: uci ifname is now known as device
Signed-off-by: William Fleurant <meshnet@protonmail.com>
2021-11-30 13:14:58 -08:00
Stan Grishin
c89f32d5c9 Merge pull request #17241 from rs/nextdns-1.37.5-openwrt-21.02
[21.02] nextdns: Update to version 1.37.5
2021-11-30 08:22:14 -08:00
Olivier Poitrey
271961e3a4 nextdns: Update to version 1.37.5
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-11-30 16:10:25 +00:00
Peter Gransdorfer
5d82c07163 ddns-scripts: use HTTPS for spdyn
Signed-off-by: Peter Gransdorfer <peter.gransdorfer@cattronix.com>
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
- PKG_RELEASE number updated
(cherry picked from commit c0296bf25d)
2021-11-30 13:03:21 +01:00
Stan Grishin
6b876c04d4 Merge pull request #17233 from stangri/openwrt-21.02
[21.02] curl: update to 7.80.0
2021-11-29 02:00:11 -08:00
Hirokazu MORIKAWA
ff5728497f icu: bump to 70.1
ICU 70 released. It updates to Unicode 14, including new characters, scripts, emoji, and corresponding API constants. ICU 70 adds support for emoji properties of strings. It also updates to CLDR 40 locale data with many additions and corrections. ICU 70 also includes many other bug fixes and enhancements, especially for measurement unit formatting, and it can now be built and used with C++20 compilers.

This change will require minor modifications in php7 and php8.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-11-29 01:42:17 -08:00
Stan Grishin
8162066e11 curl: update to 7.80.0
* bump version to 7.80.0
* update maintainer email address

Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit 80ef61729b)
2021-11-29 09:31:47 +00:00
Stan Grishin
48abd18082 Merge pull request #17162 from stangri/openwrt-21.02
[21.02] nebula: update to 1.5.0
2021-11-29 01:22:42 -08:00
Tianling Shen
4877a3b72f yq: Update to 4.15.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 63f95db55e)
2021-11-27 17:18:11 +02:00
Kerma Gérald
4f78eb825f crowdsec: update to 1.2.1
crowdsec-firewall-boucer: update to 0.0.16

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
(cherry picked from commit 2861370567)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2021-11-23 23:28:39 +01:00
Alexandru Ardelean
f71a9c91cb Merge pull request #17155 from jefferyto/golang-1.17.3-openwrt-21.02
[openwrt-21.02] golang: Update to 1.17.3
2021-11-23 13:35:32 +02:00
Gerard Ryan
b320cc083b docker: Update to 20.10.11
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-11-22 16:41:10 -08:00
Gerard Ryan
307236dca7 dockerd: Update to 20.10.11
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-11-22 16:41:10 -08:00
Gerard Ryan
b35eba3c97 containerd: Update to 1.4.12
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-11-22 16:41:10 -08:00
Nick Hainke
b74f8b68c5 conntrack-tools: import patch to fix cache
As written in the commit message:

Depending on your conntrackd configuration, events might get lost,
leaving stuck entries in the cache forever. Skip checking the conntrack
ID to allow for lazy cleanup by when a new entry that is represented by
the same tuple is added.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit da619f19f4)
2021-11-21 06:18:23 -08:00
Tao Gong
47ce72c8ba conntrack-tools: add a patch to fix endianness issue
Signed-off-by: Tao Gong <gongtao0607@gmail.com>
(cherry picked from commit f62c15f92d)
2021-11-21 06:18:23 -08:00
Michael Heimpold
88bf2ecb78 Merge pull request #17170 from mhei/21.02-php7-update
[21.02] php7: update to 7.4.26
2021-11-21 11:39:11 +01:00
Michael Heimpold
82e8726fc3 Merge pull request #17169 from mhei/21.02-php8-update
[21.02] php8: update to 8.0.13
2021-11-21 11:39:00 +01:00
Michael Heimpold
41b3505f73 php8: update to 8.0.13
This fixes:
    - CVE-2021-21707

Also drop upstream patch which is included in the release now.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 2e9c1a00ea)
2021-11-21 00:04:18 +01:00
Michael Heimpold
2381ced339 php7: update to 7.4.26
This fixes:
    - CVE-2021-21707

Also drop upstream patch which is included in the release now.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit c6f27671a3)
2021-11-21 00:00:54 +01:00
Josef Schlehofer
495c76cd51 rosy-file-server: drop this package
Reasons to drop this package:
a) this package depends on luci-app-rosy-file-server
Unfortunately, it was marked as broken as it is unmaintained.

See: 34b682afac

b) maintainer is inactive
c) rosinson website does not seem to be working

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f1893a426a)
2021-11-20 16:47:07 +02:00
Stan Grishin
103484c4b9 nebula: update to 1.5.0
* update binaries to version 1.5.0 (thanks @jefferyto)
* update maintainer's email address

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 1421440174)
2021-11-19 21:55:37 +00:00
Stan Grishin
f543e82a4d Merge pull request #17159 from rs/nextdns-1.37.4-openwrt-21.02
[21.02] nextdns: Update to version 1.37.4
2021-11-19 09:49:55 -08:00
Olivier Poitrey
e112fc9535 nextdns: Update to version 1.37.4
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-11-19 17:34:52 +00:00
Jeffery To
8d99ece4bd golang: Update to 1.17.3
Contains fixes for:

* CVE-2021-41771: ImportedSymbols in debug/macho (for Open or OpenFat)
  accesses a memory location after the end of a buffer

* CVE-2021-41772: archive/zip Reader.Open panic via a crafted ZIP
  archive containing an invalid name or an empty filename field

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 901f80aae7)
2021-11-19 22:02:43 +08:00
Paul Spooren
c0ceaca007 auc: remove superfluous variables
Remove parsing of data which is not used within `auc`. Later iterations
may use these but they can be gradually added whenever needed.

Also remove HTTP code handling of error codes no longer used by the
backend. Early iterations of the server where infinitely complex to
figure out created images and announce them to clients but ever since
everything is stored in JSON, things got better (aka simpler).

If a package is missing on the upstream server, color it in red.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 6527d65b9b)
2021-11-15 21:18:38 +00:00
Paul Spooren
34e512ac2a auc: use /json/v1/
Currently `auc` uses the outdated /json/ path, this commit uses
/json/v1/ to be more future proof.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 69b5c28929)
2021-11-15 21:18:31 +00:00
Daniel Golle
a95f71a736 auc: fix some minor issues
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 51f9df5b92)
2021-11-15 21:18:20 +00:00
Tianling Shen
15beed2b46 rclone: Update to 1.57.0
- Disabled unused plugins and re-enabled CGO.
- Fixed test script

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f712dc311e)
2021-11-15 13:10:53 -08:00
Tianling Shen
966e3cc097 yq: Update to 4.14.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8eab3a2bf2)
2021-11-15 13:10:38 -08:00
Daniel Golle
2c6faddd3b exim: update to version 4.95
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 40c71110f0)
2021-11-15 20:05:40 +00:00
Daniel Golle
4f84a86318 exim: some clean ups
* use username/group 'exim' instead of mail
 * register configuration file
 * make sure /usr/lib/exim/lookups exists

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 66a62e2fcf)
2021-11-15 20:05:35 +00:00
Daniel Golle
72288cc396 exim: add default config and init script, enable lmtp
Ship default configuration /etc/exim/exim.conf as well as
a simple procd init script. Enable building with LMTP for better
integration with dovecot.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 31d12ead78)
2021-11-15 20:05:31 +00:00
Daniel Golle
783ee334f0 exim: update to version 4.94.2
Several exploitable vulnerabilities in Exim were reported to us and are
fixed.
Local vulnerabilities
- CVE-2020-28007: Link attack in Exim's log directory
- CVE-2020-28008: Assorted attacks in Exim's spool directory
- CVE-2020-28014: Arbitrary PID file creation
- CVE-2020-28011: Heap buffer overflow in queue_run()
- CVE-2020-28010: Heap out-of-bounds write in main()
- CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
- CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
- CVE-2020-28015: New-line injection into spool header file (local)
- CVE-2020-28012: Missing close-on-exec flag for privileged pipe
- CVE-2020-28009: Integer overflow in get_stdinput()
Remote vulnerabilities
- CVE-2020-28017: Integer overflow in receive_add_recipient()
- CVE-2020-28020: Integer overflow in receive_msg()
- CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
- CVE-2020-28021: New-line injection into spool header file (remote)
- CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
- CVE-2020-28026: Line truncation and injection in spool_read_header()
- CVE-2020-28019: Failure to reset function pointer after BDAT error
- CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
- CVE-2020-28018: Use-after-free in tls-openssl.c
- CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()

The update to 4.94.2 also integrates a fix for a printf format issue
previously addressed by a local patch which is removed.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c241cb12bb)
2021-11-15 20:05:26 +00:00
Rosen Penev
cead8569ef exim: fix compilation without deprecated OpenSSL APIs
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit de9c527e9a)
2021-11-15 20:05:22 +00:00
Daniel Golle
b30fc0a677 gpgme: update to version 1.16.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit e0e5dea89e)
2021-11-15 20:05:17 +00:00
Oskari Rauta
c55523b8c3 podman: update to 3.4.1
A lot of changes since 3.3.1.

Full (long) lists of release notes between
versions are available at
https://github.com/containers/podman/releases

containers.conf updated

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 3e5761d6cd)
2021-11-15 20:05:13 +00:00
Huangbin Zhan
23415c4377 podman: fix broken conffiles
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
(cherry picked from commit e6e770b268)
2021-11-15 20:05:08 +00:00
W. Michael Petullo
4ccf034829 podman: update to 3.3.1
Earlier versions of podman did not make use of TMPDIR when running "podman
run ...". Podman's default, /var/tmp, presents a problem to rootless
use since OpenWrt's /var/tmp does not permit writes by non-root users.
Podman 3.3.1 makes full use of TMPDIR.

This is part of an attempt to get rootless podman to work on OpenWrt.
See https://github.com/openwrt/packages/issues/15096.

See also the upstream issue at
https://github.com/containers/podman/issues/10698.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 416eced174)
2021-11-15 20:05:03 +00:00
W. Michael Petullo
37df6c3ca0 podman: change permissions on /usr/share/containers/seccomp.json
Running podman as users other than root seems to require that those
users can read /usr/share/containers/seccomp.json. This change sets the
permissions on that file to match those used on Fedora.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit a41556af4f)
2021-11-15 20:04:58 +00:00
Oskari Rauta
ea7b959fde podman: update to 3.2.0
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit e565bebf41)
2021-11-15 20:04:54 +00:00
W. Michael Petullo
16a3da37a8 podman: change permissions on /etc/containers
Running podman as users other than root seems to require that those
users can read the configuration files in /etc/containers. This change
sets the permissions of /etc/containers and its contents to match those
used on Fedora.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit f51ef46aa6)
2021-11-15 20:04:49 +00:00
Oskari Rauta
a129759f04 podman: bumb version to 3.1.2
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit b6299c763a)
2021-11-15 20:04:44 +00:00
Oskari Rauta
405bc67f82 podman: update to 3.1.1
- Add support for AppArmor
 - Gracefully stop containers and pods on shutdown

I found out that If you change location of containers to persistent storage instead of tmpfs, starting them will fail unless they have been stopped. If this is the case that reboot has occurred before pods and containers have been stopped, they cannot be started, they have to be removed and re-created. Change in initscript tries to avoid that. Even if containers are running at tmpfs, this won't hurt. Still, if something happens and system hangs/reboots/etc, script won't save you from that. It's just a attempt to make things better.
I also enabled AppArmor support for future possibilities.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 5bb8844fe3)
2021-11-15 20:04:40 +00:00
Oskari Rauta
961551a85c podman: Add selinux variant and several improvements
* add -selinux variant which depends on libselinux
* init script for background service
* updated configurations
* maintainer change as requested

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit abce423851)
2021-11-15 20:04:35 +00:00
Daniel Golle
cb1d97d52a podman: add 'crun' to containers.conf
Now that 'crun' has been packaged, add support for it in podman.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 954be76e6a)
2021-11-15 20:04:30 +00:00
Daniel Golle
90e58bdb97 podman: update to version 3.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 3c758231cb)
2021-11-15 20:04:26 +00:00
Oskari Rauta
2b73497737 conmon: update to 2.0.30
bug fixes:
 - Remove unreachable code path
 - exit: report if the exit command was killed
 - exit: fix race zombie reaper
 - conn_sock: allow watchdog messages through the notify socket proxy
 - seccomp: add support for seccomp notify

misc:
 - Add seccomp to build dependency

included patch removes unnecessary dependency of libdl and also allows a succesfull build
disabled for arc where libseccomp does not seem to be available

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit ab08ad2ad9)
2021-11-15 20:04:21 +00:00
Oskari Rauta
6e74b5d7ba conmon: update to 2.0.29
Patch fixing segfaults on nulls was removed due to patch's content being now included in conmon's source since containers/conmon@355dbf1

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 9fdfe2e2c7)
2021-11-15 20:04:16 +00:00
Oskari Rauta
18cc7640b6 conmon: fix segfault, correct a typo and update description
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 463227f70c)
2021-11-15 20:04:11 +00:00
Daniel Golle
78a629de7a conmon: update to version 2.0.27
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 301abeecdc)
2021-11-15 20:04:06 +00:00
Rosen Penev
e4d64cc279 conmon: update to 2.0.26
Switched to building with meson as it works better in a parallel
context.

Small Makefile adjustments for consistency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c8128df4e4)
2021-11-15 20:04:02 +00:00
Daniel Golle
da757a11ed cni-plugins: update to version 1.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit b42ea814a0)
2021-11-15 20:03:57 +00:00
Daniel Golle
95c6044151 cni-plugins: update to version 1.0.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit ab5050ed65)
2021-11-15 20:03:53 +00:00
Daniel Golle
89574510eb cni-plugins: depend on kmod-veth
cni-plugins makes use of veth, make sure kernel module is installed.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 1b25b6e239)
2021-11-15 20:03:48 +00:00
Daniel Golle
3a8dac1bc7 cni-plugins: update to version 0.9.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit d3da072411)
2021-11-15 20:03:44 +00:00
Daniel Golle
2a684bdfab cni: update to version 1.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 043bc28dd1)
2021-11-15 20:03:39 +00:00
Oskari Rauta
e1489cd0f4 cni: update to 0.8.1
This is a security release that fixes a single bug:
 - tighten up plugin-finding logic (#811)

Users of libcni are strongly encouraged to update.

Added me to list of maintainers as requested by @dangowrt.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit ceaccc1c7a)
2021-11-15 20:03:34 +00:00
Daniel Golle
2d027dc824 libinput: update to version 1.19.2
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 23ac7563c2)
2021-11-15 20:03:30 +00:00
Daniel Golle
0972feac51 libinput: update to version 1.19.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit e852f509cf)
2021-11-15 20:03:25 +00:00
Daniel Golle
975bb6f486 libinput: package libinput cli applets and quriks
Also package /usr/libexec/libinput/* and /usr/share/lib/input/*.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit f53cd4232a)
2021-11-15 20:03:21 +00:00
Daniel Golle
cd42b74ac8 libinput: update to version 1.18.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 112e5628f4)
2021-11-15 20:03:16 +00:00
Daniel Golle
4042c299bd libinput: update to version 1.17.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 81ccb88a80)
2021-11-15 20:03:11 +00:00
Daniel Golle
2e5a72bf50 libevdev: update to version 1.12.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 60bc9982b4)
2021-11-15 20:03:07 +00:00
Daniel Golle
d337bce97f libextractor: update to version 1.11
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 42707fc1ee)
2021-11-15 20:03:02 +00:00
Daniel Golle
fd4648a61e pyodbc: update to version 4.0.32
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 264f7b2f5f)
2021-11-15 20:02:57 +00:00
Tianling Shen
aac8be18a7 pyodbc: update hash
This package was updated without a hash change.

Fixes: c157522580 ("pyodbc: update to version 4.0.31")

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b783386890)
2021-11-15 20:02:53 +00:00
Daniel Golle
fe1b4a705f pyodbc: update to version 4.0.31
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c157522580)
2021-11-15 20:02:49 +00:00
Daniel Golle
c4c8aeef2a Werkzeug: update to version 2.0.2
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit e971718892)
2021-11-15 20:02:44 +00:00
Daniel Golle
0eb4b34fe1 Jinja2: update to version 3.0.3
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 7c3d48497f)
2021-11-15 20:02:39 +00:00
Daniel Golle
1c0dba8838 click: update to version 8.0.3
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 6ea6c94a48)
2021-11-15 20:02:33 +00:00
Daniel Golle
738e354e2c perl-mail-spamassassin: update to version 3.4.6
Fixes CVE-2020-1946

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 86bd165f8c)
2021-11-15 20:02:28 +00:00
Rosen Penev
68e5146b1c perl-mail-spamassassin: fix compilation without deprecated OpenSSL APIs
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 02d54e1a6f)
2021-11-15 20:02:23 +00:00
Daniel Golle
7882b7a012 perl-net-dns: update to version 1.32
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 05dcea0289)
2021-11-15 20:02:17 +00:00
Daniel Golle
de68cf3c49 perl-net-dns: update to version 1.30
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 1876cd2ff2)
2021-11-15 20:02:11 +00:00
Daniel Golle
8dbccb11e4 opentracker: update to git HEAD of 2021-08-23
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 0e380d8cff)
2021-11-15 20:02:06 +00:00
Daniel Golle
10a19bf58e opentracker: update to git HEAD
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 0a38cb930a)
2021-11-15 20:02:02 +00:00
Daniel Golle
1bab442dee opentracker: update to git HEAD
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit ddeb936ce1)
2021-11-15 20:01:57 +00:00
Daniel Golle
9fde4ba670 libksba: update to version 1.6.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 0876a981c2)
2021-11-15 20:01:52 +00:00
Daniel Golle
1322801587 libksba: update to version 1.5.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 1c7ef6c666)
2021-11-15 20:01:46 +00:00
Daniel Golle
821bcc603e libassuan: update to version 2.5.5
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 1f50a9e417)
2021-11-15 20:01:41 +00:00
W. Michael Petullo
2260a2227f libgpg-error: patch to fix cross-compile
Paul Blazejowski discovered that the recent update to this package broke
cross-compiling for some OpenWrt platforms. This backports commit 33593864
(March 26, 2021) from the upstream libgpg-error project to fix this
problem.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 71b7f74ff1)
2021-11-15 20:01:35 +00:00
W. Michael Petullo
8c8e574884 libgpg-error: update to 1.42
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit c664e1f207)
2021-11-15 20:01:28 +00:00
Daniel Golle
a7a0519590 i2c-tools: update to version 4.3
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 4ed7701b78)
2021-11-15 20:01:23 +00:00
Daniel Golle
698f54b328 hiredis: update to version 1.0.2
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c15172f7f7)
2021-11-15 20:01:18 +00:00
Rosen Penev
543c0969d1 hiredis: fix compilation with macOS
uname is used to test the host OS. Override it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0ce3a961d3)
2021-11-15 20:01:08 +00:00
Daniel Golle
2fb6292391 gawk: update to version 5.1.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit be6099fb7e)
2021-11-15 20:01:04 +00:00
Daniel Golle
dc8398b66b ccid: update to version 1.4.36
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit f8e79854f9)
2021-11-15 20:00:59 +00:00
Rosen Penev
7ee645cba7 ccid: fix compilation under macOS
Remove a bad uname check.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7a7d1a5d2c)
2021-11-15 20:00:54 +00:00
Daniel Golle
920608fdc9 ccid: update to version 1.4.35
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit a87236861f)
2021-11-15 20:00:49 +00:00
Daniel Golle
c0d45ae37e ccid: update to version 1.4.34
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c22638cb83)
2021-11-15 20:00:45 +00:00
Daniel Golle
4c9cb7aa5d cryptsetup: update to version 2.4.1
Package new experimental SSH token authenticator plugin as new package
'cryptsetup-ssh'.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 97dd009f58)
2021-11-15 20:00:40 +00:00
Javier Marcet
d6474f836b cryptsetup: update to version 2.3.6
Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 2bff0b47aa)
2021-11-15 20:00:33 +00:00
Daniel Golle
c840b702b5 cryptsetup: update to version 2.3.5
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c644917ca7)
2021-11-15 20:00:28 +00:00
Daniel Golle
010ac65551 opensc: update to version 0.22.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit a8f37fc15b)
2021-11-15 20:00:23 +00:00
Daniel Golle
45388a559d opensc: update to version 0.21.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c84ab8890c)
2021-11-15 20:00:18 +00:00
Daniel Golle
4f879fe495 pcsc-lite: update to version 1.9.4
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 7e2a56e77d)
2021-11-15 20:00:13 +00:00
Daniel Golle
98bd765852 pcsc-lite: update to version 1.9.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit fee9ad1c68)
2021-11-15 20:00:07 +00:00
Daniel Golle
717f494ca7 postgresql: update to version 13.5
Addresses CVE-2021-3393 and CVE-2021-20229.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-11-15 20:00:02 +00:00
Daniel Golle
3b0f19d6d2 lvm2: update to version 2.03.14
Drop two local patches which were replaced by upstream commits.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 74969337cf)
2021-11-15 19:59:57 +00:00
Daniel Golle
bc5bb12547 lvm2: update to version 2.03.13
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit f20f69e63b)
2021-11-15 19:59:52 +00:00
Daniel Golle
3bbdaa49e0 lvm2: add hotplug script to scan and enable PVs on hotplug
Automatically scan and activate physical volumes when added at runtime.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit f32236e542)
2021-11-15 19:59:47 +00:00
Daniel Golle
633e6a3032 lvm2: update to version 2.03.12
Two notable changes are devices file and metadata based autoactivation.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit dc27d43f29)
2021-11-15 19:59:42 +00:00
Daniel Golle
99dcad1aee lvm2: don't use -normal suffix for non-SELinux variants
This was probably a work-around for an issue with dependencies which
was fixed by
988ed00802

Remove it as all other packages with `-selinux` variants do provide
a non-SELinux-variant without any suffix and that works now, see
procd vs. procd-selinux
busybox vs. busybox-selinux

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 43597b918a)
2021-11-15 19:59:37 +00:00
Daniel Golle
ec01d0c395 libudev-zero: update to version 1.0.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 36b9ff3c83)
2021-11-15 19:59:33 +00:00
Daniel Golle
beffb3c3ff libudev-zero: update to version 0.5.2
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 50bb46baaa)
2021-11-15 19:59:27 +00:00
Daniel Golle
3d417377b3 libudev-zero: update to version 0.4.8
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 7341e39768)
2021-11-15 19:59:20 +00:00
Josef Schlehofer
b1d69822db Merge pull request #17113 from paper42/cve-2019-19906-21
[21.02] cyrus-sasl: patch CVE-2019-19906
2021-11-15 00:23:44 +01:00
Giovanni Giacobbi
6918a2c9a8 php8: Clean up and update distributed php.ini for php 8.0.12
Details:
- Cleaned up whitespace and removed comments (refer to official PHP documentation for that)
- Removed directives that no longer exist as of PHP 8.0.12
- Added newly existing directives commented out
- Added '~E_DEPRECATED' to 'error_reporting'

Signed-off-by: Giovanni Giacobbi <giovanni@giacobbi.net>
(cherry picked from commit f54b987c8f)
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-11-14 08:50:43 +01:00
Michal Vasilek
44838c21e4 cyrus-sasl: patch CVE-2019-19906
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit f7717bd382)
2021-11-13 16:09:28 +01:00
Michael Heimpold
55e2919e47 Merge pull request #17111 from thg2k/pr/21_php74_ini_1
[21.02] php7: Update and clean up distributed php7.ini
2021-11-12 07:47:26 +01:00
Ren Zongjia
ad1c43328f dockerd: Update to 20.10.10
Signed-off-by: Ren Zongjia <acooler15@foxmail.com>
2021-11-11 03:14:46 -08:00
Ren Zongjia
786d3c7d73 docker: Update to 20.10.10
Signed-off-by: Ren Zongjia <acooler15@foxmail.com>
2021-11-11 03:14:46 -08:00
Ren Zongjia
895dac37b6 containerd: Update to 1.4.11
Signed-off-by: Ren Zongjia <acooler15@foxmail.com>
2021-11-11 03:14:46 -08:00
Ren Zongjia
2c928a0980 runc: Update to 1.0.2
Signed-off-by: Ren Zongjia <acooler15@foxmail.com>
2021-11-11 03:14:46 -08:00
Giovanni Giacobbi
7e45ad87f3 php7: Clean up and update distributed php.ini for php 7.4.25
Details:
- Cleaned up whitespace and removed comments (refer to official PHP documentation for that)
- Removed directives that no longer exist as of PHP 7.4.25
- Added '~E_DEPRECATED' to 'error_reporting'

Directives removed that no longer exist as of PHP 7.4.25:
- zend.ze1_compatibility_mode
- y2k_compliance
- register_globals
- register_long_arrays
- magic_quotes_gpc
- magic_quotes_runtime
- magic_quotes_sybase
- always_populate_raw_post_data

Signed-off-by: Giovanni Giacobbi <giovanni@giacobbi.net>
2021-11-11 10:18:44 +00:00
Hannu Nyman
309c5d62ae nano: enable showing line numbers with M-N (Alt-n)
Backport new upstream patch to enable toggling the display of
the line numbers with the shortcut key M-N (Alt-n).

Also the cmdline option "-l" works.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 9023845d50)
2021-11-10 20:33:15 +02:00
Michael Heimpold
13c5c2493e Merge pull request #17099 from mhei/php7-pecl-updates
[21.02] Pull latest php7 pecl package updates from master
2021-11-10 07:45:43 +01:00
Hannu Nyman
50fdbd3a7c nano: enable line numbers (from cmdline)
Enable showing line numbers, which makes it easier to find
the correct place in long files. Due to the "tiny" build,
the functionality is only available from cmdline with "-l"
option.
For example:  nano -l /etc/banner

Key shortcut M-n is disabled due to "tiny".
See https://savannah.gnu.org/bugs/?61441 for explanation.

Also
* remove without-slang config option, deprecated in Dec 2020
* adopt AUTORELEASE

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit ae7f62d637)
2021-11-09 23:12:39 +02:00
Karl Palsson
07b7e67e6f mosquitto: bump to 2.0.13
Security and bugfix releases.

Changelogs:
https://mosquitto.org/blog/2021/10/version-2-0-13-released/
https://mosquitto.org/blog/2021/08/version-2-0-12-released/

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-11-09 10:29:18 +00:00
Michael Heimpold
8c504b293e php7-pecl-redis: update to 5.3.4
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 82f115bded)
2021-11-08 07:50:52 +01:00
Michael Heimpold
ab0bcf1ea1 php7-pecl-imagick: update to 3.5.1
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 755e3c2eb6)
2021-11-08 07:50:26 +01:00
Michael Heimpold
1ded6ea244 php7-pecl-http: update to version 3.2.4
This is the latest version, which still has support for PHP 7.x.

It's an intermediate step in the transition to PHP 8.x.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 5fe58d0002)
2021-11-08 07:50:16 +01:00
Michael Heimpold
b99386f676 Merge pull request #17052 from mhei/21.01-php8-icu-compat
[21.02] php8: Support for icu 70.1
2021-11-03 17:27:52 +01:00
Michael Heimpold
45a7379b6b Merge pull request #17053 from mhei/21.01-php7-icu-compat
[21.02] php7: Support for icu 70.1
2021-11-03 17:27:36 +01:00
Tianling Shen
37941038af xray-core: remove dead jail files
It never works... And Xray-core needs root access to work.

Bump geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ab540e6990)
2021-11-03 08:14:17 -07:00
Michal Hrusecky
4df93ea611 afuse: Add new package
This commit add new package afuse into packages feed.

afuse is an automounting file system implemented in user-space using
FUSE. It implements the most basic functionality that can be expected by
an automounter; that is it manages a directory of virtual directories.
If one of these virtual directories is accessed and is not already
automounted, afuse will attempt to mount a filesystem onto that
directory. If the mount succeeds the requested access proceeds as
normal, otherwise it will fail with an error.

Signed-off-by: Michal Hrusecky <michal@hrusecky.net>
(cherry picked from commit 3d0f73ea67)
2021-11-03 13:43:58 +01:00
Josef Schlehofer
844ba69911 Merge pull request #17017 from miska/mariadb-21.02
mariadb: Update to version 10.4.21
2021-11-03 08:47:32 +01:00
Hirokazu MORIKAWA
6eecc3bd4c php7: Support for icu 70.1
This PR prepares PHP for a few minor changes that cause PHP builds to fail when using --enable-intl with ICU 70.1.

Change UBool to bool for equality operators in ICU >= 70.1

https://github.com/php/php-src/pull/7596

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit bc13112a7c)
2021-11-03 08:00:38 +01:00
Hirokazu MORIKAWA
f173d1d1da php8: Support for icu 70.1
This PR prepares PHP for a few minor changes that cause PHP builds to fail when using --enable-intl with ICU 70.1.

Change UBool to bool for equality operators in ICU >= 70.1

https://github.com/php/php-src/pull/7596

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 4da149b68a)
2021-11-02 07:37:12 +01:00
Josef Schlehofer
f2300cd651 tvheadend: add patch to update hdhomerun
Tarball with libhdhomerun_20171221 [1] was removed from upstream repository
and as it can not be found.

[1] http://download.silicondust.com/hdhomerun/libhdhomerun_20171221.tgz

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit dacda65d37)
2021-11-01 11:24:17 +01:00
Elon Huang
3aa30ceee4 rclone-ng: initial package
Signed-off-by: Elon Huang <elonh@immortalwrt.org>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 9b7e817f93)
2021-11-01 00:12:54 -07:00
Elon Huang
33b8520640 rclone-webui-react: initial package
Signed-off-by: Elon Huang <elonh@immortalwrt.org>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5204e148b3)
2021-11-01 00:12:54 -07:00
Tianling Shen
6986994097 rclone: add test script
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e475df4b79)
2021-11-01 00:12:54 -07:00
Tianling Shen
139dcb277b rclone: fix logic err in service file
- Corrected `enable` detection.
- Granted config/log write permission for `rclone` user.

Fixes: d518239888 ("rclone: initial package")

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 00747f7b97)
2021-11-01 00:12:54 -07:00
Elon Huang
ebabd2430c rclone: initial package
Signed-off-by: Elon Huang <elonh@immortalwrt.org>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d518239888)
2021-11-01 00:12:54 -07:00
Tianling Shen
3ff099e0d3 yq: Update to 4.14.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 06bb78cf4d)
2021-10-30 14:59:33 -07:00
Michal Hrusecky
fdda9ff98b mariadb: Update to version 10.4.21
Update to the latest stable version. Also contains minor Makefile
polishing - better source RL and correctly formatted license.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2021-10-30 19:58:22 +02:00
Glenn Strauss
6b2535230a lighttpd: update to lighttpd 1.4.61 release hash
also remove patches incorporated upstream into lighttpd 1.4.61

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 9786df13a8)
2021-10-30 01:05:20 -07:00
Glenn Strauss
a740068f03 lighttpd: update to lighttpd 1.4.60 release hash
also remove patches incorporated upstream into lighttpd 1.4.60

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 07446a73ca)
2021-10-30 01:05:20 -07:00
Philip Prindeville
6d753e5699 bind: Bump to 9.17.19
The following CVE updates are included:

* CVE-2021-25219: The "lame-ttl" option is now forcibly set to 0. This
  effectively disables the lame server cache, as it could previously be
  abused by an attacker to significantly degrade resolver performance.

* CVE-2021-25218: An assertion failure occurred when named attempted
  to send a UDP packet that exceeded the MTU size, if Response Rate
  Limiting (RRL) was enabled.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
Signed-off-by: Noah Meyerhans <frodo@morgul.net>

(cherry-picked from commit c2de702cbd)
2021-10-29 09:02:30 -07:00
Rosen Penev
74081b945c nginx: fix compilation with BUILD_NLS
Requires nls.mk because of libxml2.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit de176d6f6f)
2021-10-27 16:32:58 +02:00
Rosen Penev
f57e56fd46 generate-ipv6-address: fix PIC compilation
This is a single C file. Don't bother using the Makefile.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 6123f3b48e)
2021-10-27 16:28:52 +02:00
Michael Heimpold
9fa60fb624 Merge pull request #16989 from mhei/21.02-php8-update
[21.02] php8: update to 8.0.12
2021-10-27 09:45:10 +02:00
Michael Heimpold
19be77f0e5 Merge pull request #16991 from mhei/21.02-php7-update
[21.02] php7: update to 7.4.25
2021-10-27 09:44:57 +02:00
Michael Heimpold
7f10cee8ce php7: update to 7.4.25
This fixes:
    - CVE-2021-21703

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 1df333bfb0)
2021-10-26 22:26:31 +02:00
Michael Heimpold
a446dba542 php8: update to 8.0.12
This fixes:
    - CVE-2021-21703

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit fb7a33a114)
2021-10-26 22:01:53 +02:00
Nick Hainke
b6d2c8f69d dawn: set symm_enc default to 0
User mpeleshenko reported that symm encryption breaks hearing map.
Set the default to 0.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 8b7fb614dd)
2021-10-26 19:20:42 +02:00
Rosen Penev
733126fc8a mariadb: update to 10.4.18
Remove uClibc depends. It's gone now.

Remove CMAKE_INSTALL to avoid installing to InstallDev.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8a62f2ea6b)
2021-10-26 12:04:03 +02:00
Michal Vasilek
18a48195cf python-websockets: new package
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit bc10fbaebf)
2021-10-26 11:09:08 +02:00
Eneas U de Queiroz
bf3fc8365f atlas-probe: allow parallel build
Set PKG_BUILD_PARALLEL:=1

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 9e8f127c31)
2021-10-26 11:08:10 +02:00
Eneas U de Queiroz
11f686bc36 atlas-probe: Fix compilation with gcc11
This uses some definitions from <sys/cdefs.h> in gcc 8.4.0, not present
in musl or gcc11.

Also use clock_gettime() instead of syscall(__NR_clock_gettime,...),
which is not currently defined.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 281df4bcf5)
2021-10-26 11:08:06 +02:00
Michal Vasilek
9d02dfdbb6 knot-resolver: update to 5.4.2
* refresh patches
* disabling kres_gen_test is not required anymore for cross compilation, it was fixed upstream with the 5.4.1 release

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 2b3b2ffe42)
2021-10-26 11:07:56 +02:00
Josef Schlehofer
55ba910179 git: update to version 2.33.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 972e6ed2e7)
2021-10-26 11:07:44 +02:00
Josef Schlehofer
5a96548c25 msmtp: update to version 1.8.17
- Use AUTORELEASE fce
It helps when someone forgets to bump PKG_RELEASE

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 18261fcd31)
2021-10-26 11:07:34 +02:00
Josef Schlehofer
e6cea0eb58 syslog-ng: update to version 3.34.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit d8e88ef51e)
2021-10-26 11:07:30 +02:00
Josef Schlehofer
08107fbc53 dnscrypt-proxy2: update to version 2.1.1
Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 6b37a15230)
2021-10-26 11:07:24 +02:00
Jan Pavlinec
63a261a34c checksec: update to version 2.5.0
Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>
(cherry picked from commit db358e8a89)
2021-10-26 11:07:18 +02:00
Michal Vasilek
e0a2da4634 miniflux: new package
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 9697b69609)
2021-10-26 11:07:02 +02:00
Jan Pavlinec
bc785e584d redis: update to version 6.2.6
Fixes:
- CVE-2021-41099
- CVE-2021-32762
- CVE-2021-32687
- CVE-2021-32675
- CVE-2021-32672
- CVE-2021-32628
- CVE-2021-32627
- CVE-2021-32626

Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>
(cherry picked from commit 766a5b285e)
2021-10-26 11:06:33 +02:00
Jan Pavlinec
edadea28c6 redis: update to version 6.2.5
Fixes CVE-2021-32761

Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>
(cherry picked from commit 3cc8a1f37e)
2021-10-26 11:06:28 +02:00
Jan Pavlinec
86ce4cee0e redis: update to version 6.2.4
Fixes CVE-2021-32625

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit c7ffa391f1)
2021-10-26 11:06:22 +02:00
Jan Pavlinec
0412c3f0eb redis: update to version 6.2.3
Fixes CVE-2021-29477

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 5f47bec5e8)
2021-10-26 11:06:18 +02:00
Jan Pavlinec
f5464f16d9 redis: update to version 6.2.2
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 5894ca38b2)
2021-10-26 11:06:04 +02:00
Jan Pavlinec
cdd2b4668d redis: update to version 6.2.1
Changes:
-remove zmalloc patch which is part of release

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit d4ead62706)
2021-10-26 11:06:00 +02:00
Jan Pavlinec
a92f8ea070 redis: update to version 6.2.0
Fixes CVE-2021-21309

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 4e0962e8f4)
2021-10-26 11:05:56 +02:00
Jan Hák
14a3dfd307 knot: update to version 3.1.3
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 175087bf25)
2021-10-26 11:05:15 +02:00
Nick Hainke
5fccb6fd7d dawn: update to 2021-10-26
ddc007e32ced ubus: avoid use after free in handle_probe_req()
e1275713c057 github: fix workflow

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 2e02deb5a9)
2021-10-26 08:45:55 +02:00
Nick Hainke
e2d1c8a0d3 dawn: respawn dawn in case of crash
Some users report that DAWN sometimes crashes after a while. Mostly
this happens after the new update has been rolled out.

Since I would not like to go back to the older version, I add as
a workaround for now that DAWN automatically respawned.

Workaround for:
https://github.com/berlin-open-wireless-lab/DAWN/issues/151

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit c1490175d3)
2021-10-26 08:45:55 +02:00
Nick Hainke
44629438da dawn: update to 2021-10-13
d222d12bcb58 ubus: use local blub_buffer definitions and free

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 147c401d19)
2021-10-26 08:45:55 +02:00
Nick Hainke
4855c37bdb dawn: update to 2021-08-05
* c70773a - datastorage: use signal strength as a metric
* 14e0f83 - Don't display debugging output with DAWN_NO_OUTPUT
* 97e5de1 - uci: add neighbor list priority options
* 2b1a53c - dawn_uci: set default values
* 6eb747b - Use separate configs for 802.11g & 802.11a bands
* 1e34357 - Verify compatibility before parsing config message
* a7a8309 - List all neighbors with same score when kicking
* 3ba0fa4 - Change beacon request fields to appropriate values
* 009aab9 - Change mode config parameter from int to string

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 2039e3fce0)
2021-10-26 08:45:55 +02:00
Michal Vasilek
ded142471e docker: update to 20.10.9
* switch to AUTORELEASE

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-10-23 12:27:46 -07:00
Michal Vasilek
4ae2fa2df7 dockerd: update to 20.10.9
* switch to AUTORELEASE
* fixes CVE-2021-41089

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-10-23 12:27:46 -07:00
Tianling Shen
a8b45f6f6b yq: Update to 4.13.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 336577fe29)
2021-10-22 22:21:59 -07:00
Olivier Poitrey
97cd95d09d nextdns: Update to version 1.37.3
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-10-22 10:13:50 -07:00
Marcos Del Sol Vives
26e9cbc4c7 ksmbd-tools: update to 3.4.2
Signed-off-by: Marcos Del Sol Vives <marcos@orca.pet>
(cherry picked from commit 212f057df7)
2021-10-19 23:39:50 -07:00
Rosen Penev
6bc415fce5 ksmbd-tools: update to 3.4.1
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ac5097af94)
2021-10-19 23:39:50 -07:00
Fritz D. Ansel
6657d5f61a ksmbd: use hostname only as name
even if a fqdn (with domain) is set by user

Signed-off-by: Fritz D. Ansel <fdansel@yandex.ru>
(cherry picked from commit 47e87e1b75)
2021-10-19 23:39:50 -07:00
Rosen Penev
8677e7efa9 ksmbd-tools: update to 3.4.0
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0162bd3a9f)
2021-10-19 23:39:50 -07:00
Alexandru Ardelean
35fefa105a django: bump to version 3.2.8
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-10-19 13:22:47 -07:00
Stan Grishin
18d1216558 Merge pull request #16930 from stangri/openwrt-21.02
[21.02] vpn-policy-routing: bugfixes: killall and tmpfs params
2021-10-18 23:35:23 -07:00
Stan Grishin
4d08672100 vpn-policy-routing: bugfixes: killall and tmpfs params
* bugfix: change killall param from -HUP to -s HUP
* bugfix: change tmpfs param from status to gateway

Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit 2b6c8d8273)
2021-10-19 06:13:04 +00:00
Hirokazu MORIKAWA
c8c12fdadc node: bump to 14.18.1 / October 12th 2021 Security Releases
October 12th 2021 Security Releases:
 HTTP Request Smuggling due to spaced in headers (Medium)(CVE-2021-22959)
 HTTP Request Smuggling when parsing the body (Medium)(CVE-2021-22960)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-10-18 21:59:15 -07:00
Stan Grishin
64b5d2ab3f Merge pull request #16924 from stangri/openwrt-21.02
[21.02] vpn-policy-routing: revert to 0.3.4-8
2021-10-18 19:58:33 -07:00
Stan Grishin
33c4ad1216 vpn-policy-routing: revert to 0.3.4-8
* there are reports that 0.3.5-x versions do not work on some configs
* the development of the new features moved to the new package (pbr)
* revert to the last known good version of vpn-policy-routing

Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit 77514c10a7)
2021-10-19 02:36:11 +00:00
Tianling Shen
a1556162ad msgpack-c: Update to 4.0.0
- Fixed typo error in PKG_LICENSE_FILES.
- Updated CMAKE_OPTIONS.
- Refreshed the patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e4d463b89d)
2021-10-18 11:45:36 -07:00
Rosen Penev
b0efc16972 msgpack-c: don't check for GTest
Not available with OpenWrt. Fixes compilation when host GTest is
present.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7f34b03356)
2021-10-18 11:45:36 -07:00
Michal Vasilek
5195be18ae nnn: update to 4.2
* switch to AUTORELEASE

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 42bf46039c)
2021-10-18 03:39:12 +02:00
Rosen Penev
70ddf05436 fakepop: fix compilation with PKG_ASLR
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 15d2ed15ca)
2021-10-17 10:38:57 +02:00
Rosen Penev
9b2e060e53 lxc: update to 4.0.10
Remove getline patch. It seems to be for uClibc, which is no longer in
the tree.

Remove commands patch. Issue was fixed upstream. Same with the tests
patch.

Remove gpg patch. It's an upstream backport.

Refreshed others.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3df43e2f66)
2021-10-17 09:54:52 +02:00
Stan Grishin
d99e44dedb Merge pull request #16899 from stangri/openwrt-21.02
[21.02] simple-adblock: update to 1.8.8-1
2021-10-15 15:29:16 -07:00
Stan Grishin
b7bec631e2 simple-adblock: update to 1.8.8-1
* update 'check' function

Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit d11f310230)
2021-10-15 21:49:22 +00:00
Stan Grishin
6acf83e2e0 Merge pull request #16896 from stangri/openwrt-21.02
[21.02] curl: update to 7.79.1
2021-10-15 14:15:48 -07:00
Stan Grishin
3faeb8b09d curl: update to 7.79.1
* update to [7.79.1](https://curl.se/changes.html#7_79_1)

Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-10-15 20:59:53 +00:00
Josef Schlehofer
dd8e7e7416 Merge pull request #16889 from paper42/knot-3.1.2-21
[21.02]: knot: update to 3.1.2
2021-10-15 15:09:51 +02:00
Michal Vasilek
e4dec5bea3 knot: update to 3.1.2
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-10-15 00:10:49 +02:00
Kerma Gérald
a597e12e26 crowdsec-firewall-bouncer: initial package v0.0.15
/net/crowdsec-firewall-bouncer/

crowdsec-firewall-bouncer will fetch new and old decisions from
 a CrowdSec API to add them in a blocklist used by supported firewalls.

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
(cherry picked from commit 676a621647)
2021-10-13 22:18:34 -07:00
Kerma Gérald
738fda6b64 crowdsec: initial package v1.2.0
/net/crowdsec/

Crowdsec - An open-source, lightweight agent to detect
 and respond to bad behaviours.
 It also automatically benefits from a global community-wide
 IP reputation database.

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
(cherry picked from commit 8903d1b7ca)
2021-10-13 22:18:34 -07:00
Tianling Shen
b92db741e5 yq: Update to 4.13.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2f51a0188c)
2021-10-13 22:17:41 -07:00
Stan Grishin
9e3f743ed6 Merge pull request #16884 from stangri/openwrt-21.02
[21.02] https-dns-proxy: update to 2021-09-27
2021-10-13 22:08:27 -07:00
Stan Grishin
b1bd6ec8fb https-dns-proxy: update to 2021-09-27
* update to [2021-09-27](da2501f542)
* fixes https://github.com/aarond10/https_dns_proxy/issues/125
* restart instead of reload on interface hotplug
* fixes https://github.com/openwrt/packages/issues/16794
* produce output and log entries on service start/stop
* prevent unnecessary dnsmasq restarts if service has previously updated dnsmasq settings
* allow both named and typed dnsmasq instance settings to be updated
* update 010-fix-cmakelists patch file

Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit f8d16338da)
2021-10-14 04:56:07 +00:00
Michal Vasilek
ac6566a7d4 tor: update to 0.4.5.10
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-10-13 18:29:29 +03:00
Georgi Valkov
db856b6175 acme: update to 3.0.1
On September the 29th, the certificate for R3, the intermediate
CA of Let's Encrypt expired, followed by the root CA expiration
on September the 30th. Update the acme client to 3.0.1,
to make sure newly generated certificates are using the new CA.
This is a backport of 468fc5fca4.
https://github.com/openwrt/packages/pull/16801

Default to letsencrypt because the upstream default may change.
Passing --staging is no longer needed, since --serever will
select a staging server if needed.

Signed-off-by: Georgi Valkov <gvalkov@abv.bg>
Tested-by: Georgi Valkov <gvalkov@abv.bg>
Acked-by: Toke Høiland-Jørgensen <toke@toke.dk>
2021-10-12 20:13:59 +02:00
Jeffery To
70a8a309a6 golang: Update to 1.17.2
Includes fix for CVE-2021-38297 (passing very large arguments to WASM
module functions can cause portions of the module to be overwritten).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit dd986cde7f)
2021-10-10 18:27:44 -07:00
Michael Heimpold
760876059e Merge pull request #16806 from mhei/21.02-php8-update
[21.02] php8: update to 8.0.11
2021-10-09 10:58:45 +02:00
Michael Heimpold
1a1220efbd Merge pull request #16805 from mhei/21.02-php7-update
[21.02] php7: update to 7.4.24
2021-10-09 10:58:29 +02:00
Eneas U de Queiroz
f41827d277 perl: perlmod.mk: use flock when hostpkg/perl used
Avoid parallel relinking and usage of the host perl binary by wrapping
its usage around flock calls.

Sometimes, two packages will try to relink the static host perl binary
at the same time.  Neither of them will have the other's module linked
in, and one of them will unavoidably clobber the other one's binary.

This will lead to errors when a package will not be able to find a
module that was supposed to be installed.

To fix that, an exclusive flock is used when relinking, with a 900
seconds timeout to avoid locking up the build process forever.

This is not enough because the binary may be concurrently used to build
another module package; perl is used in Configure, Compile, and Install
procedures.  If timing is right, a package will fail with a "permission
denied" error.

So a shared flock call is added in Configure, Compile, and Install
definitions for host and target, with a shorter, 300 seconds timeout.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 1e18c4324f)
2021-10-08 09:47:46 -07:00
Max S Kash
58181f8fe6 ttyd: fix ssl ca option init
Signed-off-by: Max S Kash <asukms@ya.ru>
2021-10-08 09:43:56 -07:00
Alexandru Ardelean
0139e44ff2 python-pytz: bump to version 2021.3
And switch to AUTORELEASE for PKG_RELEASE.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-10-08 09:41:14 -07:00
Hannu Nyman
e155b3d293 nano: update to 5.9
Update nano editor to version 5.9.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 38143e6f8b)
2021-10-08 18:25:44 +03:00
Moritz Warning
39a116f589 smcroute: update to version 2.5.3
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2021-10-08 17:14:37 +02:00
Leo Soares
d09b92396a autossh: fix procd env issue
This commit fixes an issue where the `AUTOSSH_GATETIME` is not available in the `procd`  environment which gets overwritten by the second `procd_set_param env` call.
It now calls the `procd_set_param env` once with the two variables, instead of twice.

Signed-off-by: Leo Soares <leo@hyper.ag>
(cherry picked from commit 9c4d79519c)
2021-10-06 12:33:44 -07:00
Rosen Penev
da56846711 autossh: fix compilation without ssh installed
configure script looks for host ssh. Just pass the configure variable
directly. --with-ssh doesn't work.

Also get rid of custom Compile section. It's not needed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 63b7febf5f)
2021-10-06 12:33:39 -07:00
Michael Heimpold
3741e45eae php8: update to 8.0.11
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 6969fedfd9)
2021-10-05 22:41:35 +02:00
Michael Heimpold
b188ecff22 php8: fix module loading with glibc (refs #16642)
Without -ldl linker flag .so extensions are not loaded
when glibc is used. Fix it by providing adjusted LDFLAGS
for this case.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 1bff138517)
2021-10-05 22:41:35 +02:00
Michael Heimpold
934de93ad4 php8: update to 8.0.10
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 449acc7dac)
2021-10-05 22:41:35 +02:00
Michael Heimpold
998d21563d php7: update to 7.4.24
This fixes:
    - CVE-2021-21706

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 96a04adbf3)
2021-10-05 22:39:03 +02:00
Michael Heimpold
49ffbab9ca php7: fix module loading with glibc (refs #16642)
Without -ldl linker flag .so extensions are not loaded
when glibc is used. Fix it by providing adjusted LDFLAGS
for this case.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit d153c61650)
2021-10-05 22:38:50 +02:00
Kamil Trzciński
dc5faddacb travelmate: support meta-refresh with single-quote
Currently `travelmate` only support `<meta` tag
if it contains `"`. This updates `travelmate.sh` to support
`'` as well.

```html
<meta...content='1; url=
```

Signed-off-by: Kamil Trzciński <ayufan@ayufan.eu>
(cherry picked from commit 2cbd9a2eb1)
2021-10-04 20:36:13 +02:00
Gerard Ryan
c98f060039 cache-domains: Fixed remote script usage change
* Removed all unnecessary files after configuration
* Reduced code duplication
* Changed to symlinking config instead of copying

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-10-03 16:43:45 -07:00
Hannu Nyman
1f3f63f5de haveged: update to 1.9.15
Update haveged to version 1.9.15.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2021-10-03 21:06:50 +03:00
Tianling Shen
670fe1ea16 yq: Update to 4.13.3
Fixes: CVE-2021-33196

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 86e26a0c3b)
2021-10-02 16:21:56 -07:00
Alexandru Ardelean
7fcb8024d7 openpyxl: bump to version 3.0.9
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-09-30 14:28:44 -07:00
Niels Widger
c0b23efab0 [openwrt-21.02] delve: Update to 1.7.2
See https://github.com/go-delve/delve/blob/master/CHANGELOG.md for
changes.

Signed-off-by: Niels Widger <niels@qacafe.com>
2021-09-27 22:20:38 -07:00
Chukun Pan
365b62f4f1 zerotier: update to 1.6.6
This is a security release (see [1]).

[1] https://www.zerotier.com/2021/09/21/incident-response-to-september-20th-2021

Signed-off-by: Chukun Pan <amadeus@jmu.edu.cn>
(cherry picked from commit 7f50af8949)
2021-09-27 11:00:41 -07:00
Tianling Shen
172ebab285 xray-core: Update to 1.4.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0a2fb81acc)
2021-09-25 11:11:07 -07:00
Tianling Shen
5d3faa6a4b yq: Update to 4.13.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f97d8182b8)
2021-09-25 11:10:37 -07:00
Paul Spooren
7130515250 attendedsysupgrade-common: use sysupgrade.openwrt.org
A new server was added which runs within the OpenWrt cloud, it's much
faster and should be used instead. For development the server at
https://asu.aparcar.org stays available.

Signed-off-by: Paul Spooren <mail@aparcar.org>
2021-09-24 12:01:34 -10:00
Nicholas Smith
ecf1e65752 libmbim: bump to 1.24.8
Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit 2e3fb9c996)
2021-09-22 11:09:01 +02:00
Nicholas Smith
54a0951641 modemmanager: bump to 1.16.6
Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit 5bfe8ed2df)
2021-09-22 11:08:21 +02:00
Nicholas Smith
dab28002f5 libqmi: bump to 1.28.8
Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit 4e67af0cc1)
2021-09-22 11:06:29 +02:00
Nicholas Smith
602dbc60f1 libqmi: bump to 1.28.6
Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit 875e7a759d)
2021-09-22 11:06:24 +02:00
John Audia
d8f33f73e0 lxc: remove legacy cgroups from common.conf
I am unaware of any kernel currently provided that retains cgroup v1 support.
This patch removes these lines in /usr/share/lxc/config/common.conf to allow
for error free usage.

Providing common.conf as-is will result in failure to start. One solution is to
comment out the legacy lines.[1] This requires users to either provide a custom
version of this file on their builds or to manually edit it with each update.

Since many do not build their own, the first option is not available to them.
Manually editing the file with each update will cause a failure to start
containers set to auto-start upon rebooting into the update.

1. https://forum.openwrt.org/t/openwrt-arm64-quick-lxc-howto-guide-lms-in-debian-system-in-lxc-container/99835

Signed-off-by: John Audia <graysky@archlinux.us>
(cherry picked from commit 049cf1e1b0)
2021-09-22 00:40:36 -07:00
Michal Vasilek
67e9ed1d51 syncthing: update to 1.18.2
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 9a172a52fb)
2021-09-20 11:05:22 -10:00
Josef Schlehofer
2cd1fa16b8 python-astral: update to version 2.2
Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 1deaf6dbbe)
2021-09-17 16:09:27 +02:00
Michal Vasilek
e1c24c07f4 fail2ban: patch CVE-2021-32749
* switch to AUTORELEASE

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 273a6d19c5)
2021-09-17 15:27:43 +02:00
Michael Heimpold
7268909184 Merge pull request #16635 from mhei/21.02-php7-update
[21.02] php7: update to 7.4.23
2021-09-16 08:14:00 +02:00
Rosen Penev
97813bac7e Merge pull request #16633 from 1715173329/yq-2102
[openwrt-21.02] yq: Update to 4.13.0
2021-09-15 21:18:51 -07:00
Michael Heimpold
6979ce4a62 php7: fix config file upgrade issue (fixes #14623)
The addressed issue is related to #6893 as its resolution
is actually causing the problem.

When changing the priority of the config file it happens
that after a sysupgrade the previous file is restored
and the new file is added, ending up in a situation
like this:

/etc/php7/15_openssl.ini
/etc/php7/20_openssl.ini

Causing a double extension=openssl.so to be parsed,
which is not appropriate and leads to error message.

The same problem might also occur for mysqli since there
was also a priority change - let's take care about this
at the same time.

The solution is to remove one of the files. Since it is
a configuration file, the user might have adjusted it, so
lets just use the previous version to replace the new
installed version.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit e51a049301)
2021-09-15 21:18:31 +02:00
Michael Heimpold
2929694f87 php7: update to 7.4.23
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit fb9e05615b)
2021-09-15 21:18:19 +02:00
Tianling Shen
54d1c110b1 yq: Update to 4.13.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 993315f90a)
2021-09-16 01:45:20 +08:00
Dirk Brenken
fd21207cf8 travelmate: update to 2.0.7-2
* removed the newly introduced wpa-supplicant dependency as it makes trouble with a circular dependency

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 40f1071a39)
2021-09-15 14:53:21 +02:00
Alexandru Ardelean
2bb2a48d14 openpyxl: bump to version 3.0.8
And switch to AUTORELEASE for PKG_RELEASE.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-09-14 20:17:10 -07:00
Dobroslaw Kijowski
50351667a0 adguardhome: bump to 0.106.3
* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.106.3

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
(cherry picked from commit 3626cc96f8)
2021-09-14 11:31:43 +02:00
Dobroslaw Kijowski
a98adbc479 adguardhome: bump to 0.106.2
* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.106.2

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
(cherry picked from commit b704844658)
2021-09-14 11:31:39 +02:00
Dobroslaw Kijowski
8236e0441d adguardhome: bump to 0.106.1
* Create working directory when it is not present. Apparently
  some recent change made adguardhome fail to start when working
  directory is missing.
* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.106.1

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
(cherry picked from commit 350ba8cbbd)
2021-09-14 11:31:35 +02:00
Dobroslaw Kijowski
b5ad600a76 adguardhome: bump to 0.106.0
* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.106.0
* Add build time LDFLAG introduced in commit [1].

[1]: 1d07afb30e (diff-82ef468ec5547f1ed424776755a7f87dfec4eba9838d2c2ac02c9881bb67d737R67)

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
(cherry picked from commit 48bf0f8e81)
2021-09-14 11:31:30 +02:00
Dobroslaw Kijowski
be38dc31ec adguardhome: bump to 0.105.2
* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.105.2

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
(cherry picked from commit d12c6658e4)
2021-09-14 11:31:26 +02:00
Dobroslaw Kijowski
b1b8128e41 adguardhome: bump to 0.105.1
* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.105.0
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.105.1
* Add node-yarn/host dependency as it is needed since [1].
* Adjust LDFLAGS to the new ones introduced in [2].
* Invoke targets from make instead of manually running npm and yarn.
* Replace GO_PKG_EXCLUDES with GO_PKG_BUILD_PKG as our intention is to
  build only one specific package (a cosmetic change).

[1]: 5e20ac7ed5 (diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R140)
[2]: 0d67aa251d (diff-82ef468ec5547f1ed424776755a7f87dfec4eba9838d2c2ac02c9881bb67d737R60)

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
(cherry picked from commit d208610b8d)
2021-09-14 11:31:22 +02:00
Josef Schlehofer
c61d7c2b5d Merge pull request #16621 from jefferyto/golang-1.17.1-openwrt-21.02
[openwrt-21.02] golang: Update to 1.17.1
2021-09-14 11:30:08 +02:00
Josef Schlehofer
d203b3bba9 Merge pull request #16627 from acooler15/add_parted-21.02
[21.02]parted: add new package
2021-09-14 09:54:41 +02:00
Ren Zongjia
8a06dc026c autoconf: fix shebang
Fix shebang errors for autom4te, autoreconf, autoheader, autoscan, autoupdate, ifnames.

resolve openwrt/packages#16604

Signed-off-by: Ren Zongjia <acooler15@foxmail.com>
(cherry picked from commit 72f3dfcb0e)
Signed-off-by: Ren Zongjia <acooler15@foxmail.com>
2021-09-13 00:27:44 -07:00
Oskari Rauta
8638a565cd parted: add new package
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 5ad56ca340)
Signed-off-by: Ren Zongjia <acooler15@foxmail.com>
2021-09-13 15:15:01 +08:00
Jeffery To
3fdaf7d8dd golang: Update to 1.17.1
Includes fix for CVE-2021-39293 (archive/zip: overflow in preallocation
check can cause OOM panic).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit aa96b8408f)
2021-09-13 05:55:21 +08:00
Richard Gering
929b57d853 banip: update 0.7.10-3
* Updated firehol ipset URLs

Signed-off-by: Richard Gering <rg4github@dutchies.us>
(cherry picked from commit e803f3d75f)
2021-09-12 08:27:05 +02:00
Dirk Brenken
af46ac4bf8 travelmate: update to 2.0.7
* add wpa-supplicant package dependency
* removed no longer working 'db-bahn.login' and 'wifionice.login' auto-login scripts
* added the new 'wifibahn.login' script for auto-logins to captive portals WIFI@BAHN (DE),
  run tested on a single ICE (station logins are currently unsupported!)
* vodafone.login prepared to support free/time limited logins (still WIP!)
* change return code handling in login scripts and travelmate
* refine f_wifi function
* fix a few conercase issues

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 3167e00aff)
2021-09-11 21:22:15 +02:00
Luiz Angelo Daros de Luca
a39c803fb3 Merge pull request #16524 from paper42/hplip-no-aslr-21
[21.02] hplip: add a patch to fix PIE builds
2021-09-10 19:36:31 -03:00
Michal Vasilek
40b7ea6064 ntfs-3g: patch CVE-2019-9755
* switch to AUTORELEASE

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-09-10 13:11:26 -07:00
Alexandru Ardelean
e72cc2b0a1 python3: bump version to 3.9.7
Refreshed patches.
And apply hack for line-endings in pep517 (from pip).

Hack comment:
  # FIXME: [1] get rid of this asap; 'patch' doesn't like Windows endings, and this file is full of them...
  #        I actually tried this in a number of ways and the only way to fix this is to implement
  #        a poor-man's dos2unix using sed.
  #        The issue is with the pip package; it seems that it throws in some Windows line-endings
  #        and 'patch' won't handle them. So, we do a "dos2unix" and then patch.
  #        We can get rid of this once this is solved upstream and in pip:
  #            https://github.com/pypa/pep517/pull/130

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 26988f905f)
2021-09-10 13:10:53 -07:00
Vladislav Grigoryev
cd82a36bac fail2ban: fix hotplug when disabled
Avoid restarting fail2ban by hotplug when the service is disabled.
Related issue: https://github.com/openwrt/packages/issues/16601

Signed-off-by: Vladislav Grigoryev <vg.aetera@gmail.com>
(cherry picked from commit 57aab9f1d1)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2021-09-10 14:14:22 -04:00
Alexandru Ardelean
a5109ac20b django: bump to version 3.2.7
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-09-09 14:31:05 -07:00
Kerma Gérald
98708c83e5 fail2ban: fix package for fail2ban v0.11.2
fail2ban v0.11.2 package version 2

Following PR #15098, add fixes to build fail2ban package:
- remove use of fail2ban-python (directly use python3 in script)
- remove link to python3 in /usr/bin (break the package build)
- remove python-tests (reduce the package size)

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
(cherry picked from commit 56a084d3922c84e936ef660a67a2156439223393)
2021-09-09 16:23:49 -04:00
Kerma Gérald
f056f252ce fail2ban: initial package of fail2ban version 0.11.2
python3-pyinotify: initial package version 0.9.6 of pyinotify for python3

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
(cherry picked from commit bcb8775e48eb8f99a76b05a8539a0140513e4158)
2021-09-09 16:23:49 -04:00
Olivier Poitrey
89bdb70f17 nextdns: Update to version 1.37.2
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-09-09 12:47:42 -04:00
Ansuel Smith
58b23e9bcd unbound: backport fix for permission denied error
Currently there is a problem with log spam when ipv6 network
is dropped. Fix this by backporting a patch to silence these errors
when verbose logging is not enabled.

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
(cherry picked from commit f2f05088a5)
2021-09-09 09:09:53 -04:00
Eric Luehrsen
60a7fc7825 unbound: update to 1.3.2
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry picked from commit 17c25269d7)
2021-09-09 09:09:53 -04:00
Felix Fietkau
b81785de99 unbound: fix build on non-linux systems
Override places that call uname to detect target features

Signed-off-by: Felix Fietkau <nbd@nbd.name>
(cherry picked from commit cc1d0aa3d2)
2021-09-09 09:09:53 -04:00
Jo-Philipp Wich
8ca8872b3d cgi-io: update to latest Git HEAD
98cef9d Retry splice() syscall on EINTR

Fixes: https://github.com/openwrt/luci/issues/5342
Fixes: https://bugs.openwrt.org/index.php?do=details&task_id=4006
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit db8e0fdea4)
2021-09-08 22:06:39 +02:00
Christian Lachner
4ba1aac1fd haproxy: Update HAProxy to v2.2.17
- This update fixes CVE-2021-40346; see: https://jfrog.com/blog/critical-vulnerability-in-haproxy-cve-2021-40346-integer-overflow-enables-http-smuggling/
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2021-09-08 07:33:14 -07:00
Andy Walsh
178b9484d1 wsdd2: update to git (2021-08-09), switch to Netgear repo
* update to git (2021-08-09)
* switch to Netgear repo

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-09-08 07:30:12 -07:00
Andy Walsh
5939310841 samba: update to 4.14.7
* update to 4.14.7
* remove domain if fqdn was set
* allow disabling wsdd2 in menuconfig

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-09-08 07:29:30 -07:00
Jan Pavlinec
ca591b551b tor: update to version 0.4.5.8
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 5c9ab1ff67)
2021-09-08 11:49:17 +02:00
Rosen Penev
a0105a0f5a Merge pull request #16559 from 1715173329/xray-2102
[openwrt-21.02] xray-core: Update to 1.4.3
2021-09-07 14:58:27 -07:00
Olivier Poitrey
a5206895eb nextdns: Update to version 1.37.1
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-09-07 14:57:56 -07:00
Tianling Shen
642d2b0a58 xray-core: Update to 1.4.3
- Updated geodata to latest version
- Removed upstreamed patches

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 3f448adabb)
2021-09-08 04:03:24 +08:00
Dirk Brenken
6071edf170 banip: update 0.7.10-2
* optimize dns resolve function
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit f630037043)
2021-09-07 21:18:58 +02:00
Olivier Poitrey
9cf487461c nextdns: Update to version 1.37.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-09-07 11:31:23 -07:00
Alexandru Ardelean
dd093d4106 pillow: bump to version 8.2.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit afdcfb525c)
2021-09-07 16:49:39 +02:00
Dennis Schüsselbauer
7022e99132 acme: Fix uhttpd restart to load new certificates
Fixes issue #16256

Bump PKG_RELEASE to 6.

Signed-off-by: Dennis Schüsselbauer <scde@users.noreply.github.com>

(cherry picked from commit d69534751e)
2021-09-06 14:29:35 -07:00
Josef Schlehofer
6256cf49dd python-certifi: update to version 2021.5.30
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 571326bd48)
2021-09-06 17:32:20 +02:00
Alexandru Ardelean
59dab31e03 squashfs-tools: bump to version 4.5
Drop GCC 10 build patch
Adds 2 more utilities which are symlinks to mksquashfs,unsquashfs.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 399bb7f992)
2021-09-06 11:48:41 +02:00
Michal Vasilek
73364d0c4d hplip: add a patch to respect CFLAGS
* fixes build with PIE
* use AUTORELEASE

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-09-06 11:22:48 +02:00
Hannu Nyman
6b11337208 collectd: sensors plugin - depend on lm-sensors
Change the sensors plugin's dependency from libsensors
to lm-sensors, so that also the /usr/sbin/sensors executable
gets installed if the plugin is selected.

Although that is not needed for collectd itself,
the LuCI statistics app expects to find the sensors executable
if the plugin has been installed.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 210ff7e953)
2021-09-04 11:04:33 +03:00
Brian J. Murrell
090623ac11 mwan3: Use shebang in /etc/mwan3.user
To allow the script to define what it should be run with.
This let's the user use bash if it's available, or python, or perl, etc.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
Update PKG_VERSION to 2.10.12
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 3d824ea288)
2021-09-03 11:51:01 +02:00
Robert Högberg
119a05ffdf perlbase-data: Add dependency on perlbase-scalar
Data::Dumper requires Scalar::Util -> add missing dependency.

Signed-off-by: Robert Högberg <robert.hogberg@gmail.com>
2021-09-02 13:46:47 -07:00
Michael Heimpold
502ca434ca lttng-tools: fix linking with full language support enabled
This fixes fallout after d18692c.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit ce4701cc92)
2021-09-02 12:02:13 +02:00
Rosen Penev
73bd199abf stoken: fix compilation with BUILD_NLS
Fixes linking issue as libxml2 uses iconv.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 60682c0235)
2021-09-02 12:00:59 +02:00
Rosen Penev
7674639c57 augeas: fix compilation with BUILD_NLS
Needs nls.mk because of libxml2.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 80a0261a5d)
2021-09-02 11:59:33 +02:00
Rosen Penev
694d4c09b7 Merge pull request #16517 from jefferyto/golang-packages-remove-strip-ldflags-openwrt-21.02
[openwrt-21.02] treewide: Remove GO_PKG_LDFLAGS for stripping binaries
2021-09-01 17:16:16 -07:00
Jeffery To
9d4046157b treewide: Remove GO_PKG_LDFLAGS for stripping binaries
The "-s -w" flags in GO_PKG_LDFLAGS tells the Go compiler to strip the
binaries it produces. Since the default Go package build process will
strip binaries when CONFIG_USE_STRIP or CONFIG_USE_SSTRIP are selected,
these flags are unnecessary.

When CONFIG_NO_STRIP is selected, these flags override the user's
intention of building unstripped packages.

This removes these flags for all relevant packages.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-09-02 06:07:05 +08:00
Nguyen Quang Minh
0b8baefec2 openvpn: add OpenVPN option push-peer-info
This will allow the server to know more info about the client like
HWADDR, very useful for managing IoT devices.

See: https://www.mankier.com/8/openvpn#--push-peer-info

Signed-off-by: Nguyen Quang Minh <minhnq31@fpt.com.vn>
2021-09-01 14:19:09 -07:00
Rosen Penev
473e27bada Merge pull request #16514 from jefferyto/python-cryptography-3.4.8-openwrt-21.02
[openwrt-21.02] python-cryptography: Update to 3.4.8
2021-09-01 14:08:46 -07:00
Jeffery To
82dc4c08b1 python-cryptography: Update to 3.4.8
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 69ae9c29a2)
2021-09-02 02:33:25 +08:00
Jan Pavlinec
65057dcbb5 tailscale: update to version 1.12.3
Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>
(cherry picked from commit 23d90cabd2)
2021-09-01 14:51:35 +02:00
Jan Pavlinec
f818f4a0d5 tailscale: update to version 1.12.1
Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>
(cherry picked from commit bb419b3227)
2021-09-01 14:51:31 +02:00
Jan Pavlinec
13faefa9b2 tailscale: update to version 1.8.7
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit fabaf9f184)
2021-09-01 14:51:22 +02:00
Jan Pavlinec
a1b8c64c2d tailscale: update to version 1.8.1
Add readme with simple tailscale howto.

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 791de7b5d0)
2021-09-01 14:51:17 +02:00
Josef Schlehofer
b2665dd098 Merge pull request #16512 from paper42/libssh-21
[21.02] libssh: update to 0.9.6
2021-09-01 10:48:38 +02:00
Michal Vasilek
d721fea58e libssh: update to 0.9.6
* fixes CVE-2021-3634

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-09-01 09:56:00 +02:00
Etienne Champetier
fa1791dbc8 htop: Add HTOP_LMSENSORS config option
Enabled by default for x86, this enables lm-sensors support in htop.
Also add --enable-linux-affinity to avoid autodetecting it

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 37ca4e923d)
2021-08-31 16:27:39 -04:00
Dirk Brenken
19998f14f2 banip: update 0.7.10
* switch to unencrypted http downloads for ipdeny.com due to persistant certificate issues
* compact json generator code (tested with report files > 2MB)
* various code cleanups and optimizations

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 8ac0103cbd)
Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-08-31 11:29:13 +02:00
Rosen Penev
b38bda5ee4 Merge pull request #16494 from 1715173329/xray-2102
[openwrt-21.02] xray-core: fix build under go 1.17
2021-08-30 20:15:53 -07:00
Tianling Shen
36ffcd66f1 xray-core: fix build under go 1.17
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit dcd3f288e4)
2021-08-30 13:50:13 +08:00
Jeffery To
2b17d1ca9e golang: Update to 1.17
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit d0aab6b8bc)
2021-08-29 17:53:41 -07:00
Sebastian Kemper
0e3c2d9591 gpsd: bump to 3.23
Contains fix for time jumping back 1024 weeks after 23-October-2021.

Changes:

- Between current version and 3.23 the ABI version changed from 27 to
  29. Add ABI_VERSION variable to package as the jumps occur often.
- 0001-no-distutils-import.patch: removed because current patch doesn't
  work with new release and host python3-distutils is a build
  requirement anyway.
- 0002-ncurses6_detection.patch: fixed the patch. Currently the first
  "elif" checks for "ncurses6-config". But this is only provided by
  ncurses/host package, so the CFLAGS then contain includes that point
  into $(STAGING_DIR_HOSTPKG). The ncurses target package only installs
  "ncursesw6-config" into the staging area. So this is the only tool of
  interest. Also, the hunk moved from SConstruct to SConscript.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2021-08-29 17:53:22 -07:00
Rosen Penev
3e99ec5719 Merge pull request #16478 from 1715173329/yq-2102
[openwrt-21.02] yq: Update to 4.12.1
2021-08-27 13:30:58 -07:00
Tianling Shen
3b73213bfd yq: Update to 4.12.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8dfc2e06c6)
2021-08-28 00:43:51 +08:00
Daniel Golle
954eba88a3 auc: update to version 0.2.4
* Brings support for future connexion based API.
 * read `detail` not `message` from server
 * use regular verrevcmp for branch names, fixes update indication
 * break out usage() from main() function
 * require '-f' in case installed package is missing in remote lists
 * don't use ENETUNREACH for unlrelated error
 * Fix check for mandatory fields (stray parenthesis)
 * Don't even fetch package lists if checking only for release.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 8486f64fea)
(cherry picked from commit 23ce5b0e6f)
(cherry picked from commit 2edbc4c805)
(cherry picked from commit bd4ad7b0ba)
2021-08-27 03:53:03 +01:00
Tianling Shen
af4098118c yq: Update to 4.12.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c881b29cfd)
2021-08-25 22:49:19 +03:00
Michal Vasilek
cec17047dc apr: patch CVE-2021-35940
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 0777e40b74)
2021-08-24 19:05:22 -07:00
Stan Grishin
425b81edeb Merge pull request #16456 from rs/nextdns-1.36.0-openwrt-21.02
[21.02] nextdns: Update to version 1.36.0
2021-08-24 17:07:53 -07:00
Olivier Poitrey
1c982c63a8 nextdns: Update to version 1.36.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-08-24 23:40:32 +00:00
Karl Palsson
4adf9a1c1b mosquitto: allow auth options with per listener settings
Some settings can be either global or per listener, and we need to
support both forms in UCI.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-08-24 14:20:55 +00:00
Karl Palsson
c4f61bf57b mosquitto: init: support more UCI options
Recent versions of mosquitto have added a lot more fine grained control
of various options.  Add UCI support for all of them, and fix a couple
of things that were configured as per listener, that are actually global
settings.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-08-24 12:09:03 +00:00
Simon Polack
6c9d59571f airos-dfs-reset: add airos-dfs-reset
Ubiquitis airmax based gear does not fallback to original port after DFS
event is over. This tool triggers the fallback automatically by soft-restarting
unconditionally, whenever the configured freq differs from the running.

Signed-off-by: Simon Polack <spolack+git@mailbox.org>
(cherry picked from commit e36e8a6a3b)
2021-08-24 11:13:38 +02:00
Rosen Penev
b0a672279b Merge pull request #16443 from nwidger/delve-1.7.1-openwrt-21.02
[openwrt-21.02] delve: Update to 1.7.1
2021-08-23 12:19:47 -07:00
Niels Widger
baceb237a6 [openwrt-21.02] delve: Update to 1.7.1
See
https://github.com/go-delve/delve/blob/master/CHANGELOG.md#171-2021-08-18
for changes.

Signed-off-by: Niels Widger <niels@qacafe.com>
(cherry picked from 3583fd1c2)
2021-08-23 08:40:12 -04:00
Etienne Champetier
0bd7e25f2f phantap: update to latest commit
26bd876 Switch from ifname to device
d8d3d5f Fix blog post link

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit ac2b796704)
2021-08-22 07:53:58 -04:00
Dirk Brenken
06011c690d travelmate: update to 2.0.6
* replaced pipe input for a while/read-loop with a here document/variable as input
  (fix various subshell related bugs and oddities)
* further improve abort and re-connection handling
* prevent alleged detected connection failures (false positives) with an additional gw check,
  to stabilize VPN connections in particular

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1c0fcbd28b)
2021-08-22 08:43:52 +02:00
Dirk Brenken
3733d0a7da travelmate: update to 2.0.5-3
* simplify the scan logic, to get rid of nifty IFS tricks
* limit the nearby scan results to process only the strongest uplinks, set 'trm_maxscan' accordingly (default '10')
* update the readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 58a3cf1f01)
2021-08-22 08:43:40 +02:00
Etienne Champetier
d89bb6bec6 https-dns-proxy: patch CMakeList.txt to use OpenWrt CFLAGS
This fixes compilation issues with ASLR PIE enabled

We were compiling with '-g -DDEBUG'

https-dns-proxy_2021-07-29-*_arm_cortex-a9_vfpv3-d16.ipk
shrink from 19514 to 19095

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 374e1dd56e)
2021-08-20 21:03:24 -04:00
Ted Hess
8b5002a6ef dnscrypt-proxy2: Upgrade to 2.1.0
Adjust build opts to force GOPATH mode by setting GO111MODULE off.
Ref: https://go.dev/blog/go116-module-changes

Signed-off-by: Ted Hess <thess@kitschensync.net>
(cherry picked from commit 6981009f48)
2021-08-20 19:42:55 +02:00
Petr Štetiar
ffb8b452a1 c-ares: update to version 1.17.2
Missing input validation of host names returned by Domain Name Servers
in the c-ares library can lead to output of wrong hostnames (leading to
Domain Hijacking).

The Common Vulnerabilities and Exposures (CVE) project has assigned the
name CVE-2021-3672 to this issue.

References: https://c-ares.haxx.se/adv_20210810.html
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2021-08-20 14:46:07 +00:00
Michal Vasilek
ce0c9af931 mc: add a missing Syntax file
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 312caff03b)
Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-08-20 11:57:56 +02:00
Michal Vasilek
f5669e3a68 mblaze: new package
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 80f7a8ec8b)
2021-08-19 21:26:23 +02:00
Josef Schlehofer
af616fc584 hwdata: update to version 0.350
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 3d5bed38e8)
2021-08-19 21:26:03 +02:00
Marius Dinu
0240320e8d tvheadend: update to v4.2.8, remove static ffmpeg
- refresh patches
 - add missing dependency: libffi

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>

[edited commit message and the maintainer line]

(cherry picked from commit 326da3dbbc)
2021-08-19 21:24:59 +02:00
Rosen Penev
4ddc4a6135 tvheadend: fix compilation with GCC 9 and 10
Without this, compilation fails because of a fortify-source header.
There's something defining and undefining _GNU_SOURCE somewhere.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 57c6c5e73f)
2021-08-19 21:24:53 +02:00
Josef Schlehofer
fdee10fded python3-setuptools: add _distutils_hack
I tried to install matplotlib by using pip and it failed with the following output:

2021-08-18T11:52:26,171 Collecting matplotlib
2021-08-18T11:52:26,173   Created temporary directory: /tmp/pip-unpack-wuth2u0e
2021-08-18T11:52:26,565   Using cached matplotlib-3.4.3.tar.gz (37.9 MB)
2021-08-18T11:52:38,659   Added matplotlib from https://files.pythonhosted.org/packages/21/37/           197e68df384ff694f78d687a49ad39f96c67b8d75718bc61503e1676b617/matplotlib-3.4.3.tar.                       gz#sha256=fc4f526dfdb31c9bd6b8ca06bf9fab663ca12f3ec9cdf4496fb44bc680140318 to build tracker '/tmp/pip-   req-tracker-u30x8pht'
2021-08-18T11:52:38,660     Running setup.py (path:/tmp/pip-install-afiyiers/                            matplotlib_8e717e38862f4976a3d6cb1832ba3261/setup.py) egg_info for package matplotlib
2021-08-18T11:52:38,661     Created temporary directory: /tmp/pip-pip-egg-info-kbtiezxq
2021-08-18T11:52:38,662     Running command python setup.py egg_info
2021-08-18T11:52:38,831     Traceback (most recent call last):
2021-08-18T11:52:38,832       File "<string>", line 1, in <module>
2021-08-18T11:52:38,832       File "/usr/lib/python3.9/site-packages/setuptools/__init__.py", line 8, in <module>
2021-08-18T11:52:38,833     ModuleNotFoundError: No module named '_distutils_hack'

More details about it:
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=968410

Once I applied the patch from the bug tracker, I got further to install
it.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit feaaacc10f)
2021-08-19 21:24:20 +02:00
Jan Baier
affb4038cb zabbix: Call killall with the -s
Some versions of killall do support the `killall -SIGNAL` syntax and
have only `-s SIGNAL` which should be supported everywhere.

I see the problem with *killall (PSmisc) 23.3* on latest TurrisOS 5.2

Signed-off-by: Jan Baier <jan.baier@amagical.net>
(cherry picked from commit 641f75d98a)
2021-08-19 21:24:10 +02:00
Michal Vasilek
d0444c0f57 git: update to 2.33.0
* refresh patches

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit e684672916)
2021-08-19 21:24:06 +02:00
Dirk Brenken
f1df60218b Merge pull request #16397 from paper42/mc-21.02
[21.02] mc: update to 2.8.27
2021-08-18 21:23:43 +02:00
Michal Vasilek
e583b7e3e0 mc: update to 2.8.27
* fixes CVE-2021-36370
* refresh patches

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-08-18 15:17:52 +02:00
Rosen Penev
a551032404 Merge pull request #16358 from jamesmacwhite/21.02-stubby-0.4.0
[21.02] stubby: version 0.4.0
2021-08-18 02:01:11 -07:00
Stan Grishin
3b573b65a8 Merge pull request #16384 from stangri/openwrt-21.02
[21.02] curl: update to 7.78.0
2021-08-16 19:24:52 -07:00
Stan Grishin
542aa086ea curl: update to 7.78.0
* update to 7.78.0
* change maintainer
* remove obsolete mirror (curl.mirror.anstey.ca)
* update main curl URLs

Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit 243c86ffc8)
2021-08-17 02:16:01 +00:00
Daniel Golle
dd49c191af auc: update to version 0.2.0
Cherry-picked from
9c491c6cb auc: update to version 0.1.9
4d789eac3 auc: handle root filesystem type
545c93d45 auc: improve branch selection logic
6c784dff2 auc: move function to right place
b1d38e7ab auc: update to version 0.2.0

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-08-16 23:52:02 +01:00
Eneas U de Queiroz
395f55203f unixodbc: use 'install' when copying host binaries
'cp' fails with a text file busy error if it tries to overwrite an
executable file that is running.  'install' unlinks the file first, so
it will not cause the problem.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 47f98d7030)
2021-08-14 13:44:43 -07:00
Eneas U de Queiroz
b3c416b2d8 perl: perlmod.mk: use 'install' for host binaries
When installing a host perl module, the host perl binary in the staging
dir is replaced by using 'cp'.  However, if the binary is running in a
parallel job, cp will fail with a text file busy error.  Use
$(INSTALL_BIN), which unliks the file first to avoid the error.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 19c7496648)
2021-08-14 13:44:42 -07:00
James White
5665c3bdf9 stubby: Add multi WAN support for procd trigger
Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit 1ad5e3f88c)
2021-08-14 07:50:51 +01:00
Jonathan G. Underwood
1ca9b3c98e stubby: remove maintainer
Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
(cherry picked from commit 791a8fb2bc)
2021-08-14 07:50:41 +01:00
Rosen Penev
39b4016382 stubby: remove libidn2 and libunwind dependencies
There's no good way to get rid of these, so just delete the cmake files.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4ebc879855)
2021-08-14 07:49:55 +01:00
Rui Salvaterra
57eab26bba stubby: bump to 0.4.0
Remove obsolete patch.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit a01696890c)
2021-08-14 07:48:21 +01:00
Rosen Penev
f51e2db37d Merge pull request #16355 from commodo/django-bump-21.02
[21.02] django: bump to version 3.2.6
2021-08-13 13:41:25 -07:00
Toke Høiland-Jørgensen
cb7030229f sqm-scripts: bump to v1.5.1
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2021-08-13 18:12:45 +02:00
Dirk Brenken
eed183c5fd travelmate: update to 2.0.5-2
* scan for open uplinks even if no other station has been added/configured

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit e6e3c9481d)
2021-08-13 11:19:50 +02:00
Dirk Brenken
3eab476000 travelmate: update to 2.0.5
* support the new travelmate option 'macaddr' to use a pre-defined MAC address (per uplink)
* vpn connections are now handled separately for each uplink
* The autoadd-feature for adding open uplinks will now be limited by the 'trm_maxautoadd' option. The default is '5', '0' disables this limitation.
* more code cleanups und optimizations to reduce the repetitive connection handling workload
* bugfixes regarding multiple radio support
* refine cp detection (no longer write and parse an error file)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit c6328bad6c)
2021-08-13 11:16:38 +02:00
Alexandru Ardelean
20ff270f29 django: bump to version 3.2.6
And switch to AUTORELEASE for PKG_RELEASE.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-08-13 11:37:24 +03:00
Rosen Penev
fc129aac91 Merge pull request #16338 from G-M0N3Y-2503/docker-20.10.8-backport
Docker 20.10.8 backport
2021-08-12 11:12:41 -07:00
Gerard Ryan
b3cfba1ded dockerd: Updated to 20.10.8
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-08-12 20:12:11 +10:00
Gerard Ryan
8326710294 docker: Updated to 20.10.8
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-08-12 20:12:11 +10:00
Gerard Ryan
6fb2beb6aa containerd: Updated to 1.4.9 for docker 20.10.8
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-08-12 20:12:10 +10:00
Gerard Ryan
f815bdd729 runc: Updated to 1.0.1 for docker 20.10.8
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-08-12 20:12:10 +10:00
Paul Spooren
10b2956260 whois: update to 5.5.9
* Updated the .ga TLD server.
* Removed the .cd and cf TLD servers.
* Removed 72 new gTLDs which are no longer active.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit d424d19b5a)
2021-08-11 23:58:32 +02:00
Rosen Penev
6f82209e47 whois: update to 5.5.8
Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit a527806211)
2021-08-11 23:58:24 +02:00
Rosen Penev
eda1e1045b gitlab-runner: update to 14.0.1
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit dd51f58b14)
2021-08-11 23:36:57 +02:00
Rosen Penev
aa4171673e clamav: update to 0.103.3
Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2a685d665c)
2021-08-11 23:36:48 +02:00
Josef Schlehofer
2fc25208a3 irssi: add test.sh
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 21992344b5)
2021-08-11 23:36:18 +02:00
Rosen Penev
8de166f424 irssi: update to 1.2.3
Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 752656c6be)
2021-08-11 23:36:11 +02:00
Ansuel Smith
e264d66894 atlas-sw-probe: fix copypaste error and clean tmp dir on exit
- Fix copypaste error for PUB_KEY link creation
- Clean tmp dir on exit to clear any remaining data

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
(cherry picked from commit 842a9d399f)
2021-08-11 23:35:43 +02:00
Daniel Golle
9cb317541b Flash: update to version 2.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 2abbf288ed)
2021-08-11 23:32:56 +02:00
Daniel Golle
eb5e13d370 Jinja2: update to version 3.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 7b5b9b9d11)
2021-08-11 23:32:49 +02:00
Daniel Golle
573338fe41 Werkzeug: update to version 2.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 65c12b3c2f)
2021-08-11 23:32:45 +02:00
Daniel Golle
d1007d29f2 MarkupSafe: update to version 2.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c30b804842)
2021-08-11 23:32:35 +02:00
Daniel Golle
9fa4ce04ae click: update to version 8.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 01620b9cfb)
2021-08-11 23:32:31 +02:00
Daniel Golle
735f9ed872 itsdangerous: update to version 2.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 6ab3b605cf)
2021-08-11 23:32:25 +02:00
Josef Schlehofer
683137cbc5 Merge pull request #16195 from miska/snort3-21.02
net/snort3: Include default configs and snort2lua
2021-08-11 23:22:43 +02:00
Michal Vasilek
dccb988554 knot-resolver: update to version 5.4.0
* refresh patches
* disable kres_gen_test to fix cross

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit e7127d4684)
2021-08-09 23:13:15 +02:00
Michal Vasilek
e387725106 knot: update to version 3.1.0
* refresh patches

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 81e0fcb76f)
2021-08-09 23:13:05 +02:00
Rosen Penev
ac2b25aacd Merge pull request #16309 from jefferyto/golang-1.16.7-openwrt-21.02
[openwrt-21.02] golang: Update to 1.16.7
2021-08-09 13:59:26 -07:00
Rosen Penev
2baf7e0baf Merge pull request #16307 from jefferyto/python-twisted-21.7.0-openwrt-21.02
[openwrt-21.02] python-twisted: Update to 21.7.0, refresh patches
2021-08-09 13:58:54 -07:00
Jeffery To
a2819fab7e golang: Update to 1.16.7
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 4d7a71a7cb)
2021-08-09 17:53:22 +08:00
Jeffery To
1a3687049f python-twisted: Update to 21.7.0, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 4fa4cd8322)
2021-08-09 17:28:33 +08:00
Rosen Penev
589625789d Merge pull request #16288 from Linaro1985/openwrt-21.02_fix_libxslt
[21.02] libxslt: fix compilation because of wrong libxml2 check in configure script
2021-08-07 16:57:31 -07:00
Maxim Anisimov
78a25390b7 libxslt: fix compilation because of wrong libxml2 check in configure script
More details: 90c34c8bb9

Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
(cherry picked from commit b5ac497d66)
2021-08-05 09:15:46 +03:00
Rosen Penev
42eaa2ea2c Merge pull request #16258 from stangri/21.02-curl
[21.02] curl: enable HTTP/2 support by default
2021-08-03 12:21:13 -07:00
Stan Grishin
d96b2c894e Merge pull request #16275 from stangri/21.02-simple-adblock
[21.02] simple-adblock: update to 1.8.7-6
2021-08-02 00:25:40 -07:00
Stan Grishin
beba982403 simple-adblock: update to 1.8.7-6
* supports newer shellcheck
* restore EXTRA_COMMANDS compatibility with 19.07
* move status display from various functions to status_service
* bugfix: status_service line break after output
* minor arythmetic fix in status_service

Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-08-02 07:03:55 +00:00
Stan Grishin
babb7144ea Merge pull request #16253 from stangri/21.02-https-dns-proxy
[21.02] https-dns-proxy: update to 2021-07-29-1
2021-08-01 22:58:28 -07:00
Rosen Penev
4bd6eb8064 Merge pull request #16266 from nxhack/2102_node_14174
[21.02] node: bump to 14.17.4
2021-08-01 13:29:40 -07:00
Michael Heimpold
49b1a6f4cc Merge pull request #16264 from mhei/21.02-php8-update
[21.02] php8 update to 8.0.9
2021-08-01 12:32:47 +02:00
Michael Heimpold
97c52348df Merge pull request #16267 from mhei/21.02-php7-update
[21.02] php7: update to 7.4.22
2021-08-01 12:32:25 +02:00
Michael Heimpold
f5e35bf1df Merge pull request #16265 from mhei/libxml2-update
[21.02] libxml2: update to 2.9.12
2021-08-01 12:31:30 +02:00
Michael Heimpold
51de4b108e php7: update to 7.4.22
This fixes:
    - CVE-2021-21704
    - CVE-2021-21705

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

(cherry picked from commits
  - 555d0c9a29
  - f15aba89f7
  - 741d6d6768)
2021-08-01 06:51:18 +02:00
Michael Heimpold
38fc5d866d libxml2: update to 2.9.12
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 6b932d3ff7)
2021-08-01 06:36:48 +02:00
Michael Heimpold
e928ef733e php8: add CI runtime test
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 2dad652446)
2021-07-31 15:34:11 +02:00
Michael Heimpold
91be67942d php8: update to 8.0.9
Also update opcache makefile patch.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commits
 - 5e82e6be71
 - 0154157b6c
 - 961b7c5a25
 - 7ddd5280d4
 - 9080dce60f)
2021-07-31 15:34:11 +02:00
Hirokazu MORIKAWA
bc6d77a7ce node: bump to 14.17.4
July 2021 Security Releases:

Use after free on close http2 on stream canceling (High) (CVE-2021-22930)
Node.js is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.
You can read more about it in https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22930

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-07-31 11:30:27 +09:00
Stan Grishin
af5c3af0c3 curl: enable HTTP/2 support by default
Description: Lack of support of HTTP/2 by default starts to hurt,
for example with https-dns-proxy package, some DoH resolvers (like mullvad)
no longer support HTTP/1 and are not usable.

This enables HTTP/2 support by default (which would bring ~68Kb libnghttp).

Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-07-30 23:20:34 +00:00
Stan Grishin
3cb1894b83 https-dns-proxy: update to 2021-07-29-01
* update binary to the latest commit (2021-07-29) to fix #16222 and #16239
* add hotplug.d/iface file and update Makefile to install it
* use Cloudflare's and Google's bootstrap DNS if bootstrap DNS is missing
* minor improvements in append_bool function
* add append_counter function for verbosity setting
* add append_bootstrap function (and supporting functions) to parse/sanitize bootstrap setting
* move firewall array from 'main' instance to the first proxy instance
* delete useless 'main' instace

Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-07-30 13:11:52 +00:00
Olivier Poitrey
c4a323903f nextdns: Update to version 1.35.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-07-30 12:40:03 +03:00
Nick Hainke
bda6773b94 dawn: update to 2021-07-27
276ca16 msghandler: fix rrm array parsing
1e4871d datastorage: debug rrm capabilities

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 6582979678)
2021-07-27 16:07:52 +02:00
Dirk Brenken
25a0a5cc4a travelmate: update to 2.0.4
* code cleanup
* add auto login script for Julianahoeve beach resort (NL)
* add auto login script for Vodafone hotspots (DE)
* add auto login script for telekom hotspots (DE)
* enhance captive portal detection to support html redirects as well
* change default captive portal detection url to
  'detectportal.firefox.com'

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 380a5110b4)
2021-07-27 14:05:21 +02:00
Stan Grishin
aacfbe1534 Merge pull request #16145 from stangri/21.02-vpn-policy-routing
[21.02] vpn-policy-routing: update to 0.3.5-1
2021-07-26 20:36:14 -07:00
Dirk Brenken
877b652147 adblock: bugfix 4.1.3-3
* fix regex to prepare google safesearch domains

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 69a2a68c31)
2021-07-26 20:01:09 +02:00
Rosen Penev
11455c0fd6 librouteros: don't build docs
Fixes compilation without host pod2man.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit e41fd1794b)
2021-07-25 22:19:02 +03:00
Josef Schlehofer
ecea08671f Merge pull request #16213 from 1715173329/yq-2102
[openwrt-21.02] yq: Update to 4.11.2
2021-07-24 17:27:40 +02:00
Tianling Shen
2c7ad7ca61 yq: Update to 4.11.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d8fcfb0628)
2021-07-24 18:30:25 +08:00
Michal Hrusecky
979464c6a1 net/snort3: Include default configs and snort2lua
Include default configuration files to have something to start from.
Also include snort2lua to help convert snort2 rules to snort3 to also
help with bootstrapping the configuration.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2021-07-22 14:15:53 +02:00
Josef Schlehofer
fefd882274 syslog-ng: update to version 3.33.2
Changelog:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.33.2

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 4b06f9ff4c)
2021-07-22 07:51:03 +02:00
Scott Lamb
17c4b03320 ddns-scripts: use https for google ipv6 ddns url
This matches an ipv4 change in 21f5cdd2fa and has the same rationale.
Google requires https for both ipv6 and ipv6.

Signed-off-by: Scott Lamb <slamb@slamb.org>
(cherry picked from commit e5f45b94c0)
2021-07-21 23:54:17 +02:00
Rosen Penev
d2cb8f4eed erlang: disable PIE
Fails to compile with it on.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 5685d92268)
2021-07-21 23:53:42 +02:00
George Iv
fc598339c6 yggdrasil: bump to 0.4.0
- Bump yggdrasil-go version to v0.4.0
- Update ygguci tool for compatibility with the new yggdrasil-go version
- Yggdrasil's config file is now generated in a separate command before running the daemon

Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>
(cherry picked from commit e135c4c867)
2021-07-20 20:57:25 -07:00
Rosen Penev
8d20c9ff4d Merge pull request #16165 from stangri/21.02-vpnbypass
[21.02] vpnbypass: update to 1.3.2-1
2021-07-20 20:55:51 -07:00
Stan Grishin
4ea887e643 vpnbypass: updates to 1.3.2-1
bugfix: domain names bypass
rename config file
update Makefile
updated README link
updated shellcheck compatibility
support for 21.02.0-rc2 and later
updated code for interface triggers
add newline to test.sh

Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-07-20 21:23:41 +00:00
Rosen Penev
28dacea430 Merge pull request #16154 from nwidger/niels/delve-1.7.0-openwrt-21.02
[openwrt-21.02] delve: Update to 1.7.0
2021-07-20 02:14:50 -07:00
Rosen Penev
903679ddb2 Merge pull request #16156 from 1715173329/yq-2102
[openwrt-21.02] yq: Update to 4.11.0
2021-07-20 02:14:18 -07:00
Josef Schlehofer
5e69e41081 Revert "net/miniupnpd: ext_ip_reserved_ignore support"
This patch is causing several issues [1], which then were reported to
upstream [2] and it was not accepted by upstream [3]. This results that
nobody maintain this custom patch and it is not useful as it is changing
addr_is_reserved behavior.

[1] https://github.com/openwrt/packages/issues/15258
[2] https://github.com/miniupnp/miniupnp/issues/542
[3] https://github.com/miniupnp/miniupnp/pull/511

This reverts commit b76aa99194.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 107f3376b5)
2021-07-20 10:25:21 +02:00
Jan Hak
117c6bf761 knot: update to version 3.0.8
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 5f374929cf)
2021-07-20 09:40:04 +02:00
Jan Hak
1c69a52703 knot: update to version 3.0.7
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 8d66f49bae)
2021-07-20 09:39:55 +02:00
Tianling Shen
17809e28a1 yq: Update to 4.11.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a5f657ecf7)
2021-07-19 22:15:30 +08:00
Niels Widger
eabde6aab5 delve: Update to 1.7.0
See
https://github.com/go-delve/delve/blob/master/CHANGELOG.md#170-2021-07-19
for changes.

Signed-off-by: Niels Widger <niels@qacafe.com>
(cherry picked from 098d61ca1)
2021-07-19 08:39:15 -04:00
Rosen Penev
d74aedca8a Merge pull request #16150 from jefferyto/golang-1.16.6-openwrt-21.02
[openwrt-21.02] golang: Update to 1.16.6
2021-07-19 03:38:16 -07:00
Jeffery To
ec9700fee4 golang: Update to 1.16.6
Includes fix for CVE-2021-34558 (crypto/tls: clients can panic when
provided a certificate of the wrong type for the negotiated parameters).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit c0c62227bd)
2021-07-19 07:18:08 +08:00
Rosen Penev
b8a50d7a6c Merge pull request #16147 from luizluca/21.02/sane-fix_backport
[21.02] sane-backends fix usbid generation (backport)
2021-07-17 21:30:46 -07:00
Sebastian Kemper
f7ba01cdd4 sane-backends: use macros (properly), remove chmod
- use $(INSTALL_DIR) instead of mkdir
- using $(INSTALL_CONF) and then running chmod is pointless, use
  $(INSTALL_DATA) directly
- /etc/xinetd.d/sane-port doesn't need read protection from non-root
  users, use $(INSTALL_DATA) as well

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit f37006c2e6)
2021-07-18 00:58:40 -03:00
Sebastian Kemper
041e287766 sane-backends: fix usbid file generation
On some build systems (build bots, Debian Buster for example) the
current mechanism in the Build/Install define doesn't run. Replace it
with shell fu that works.

Issue was reported, see [1].

[1] https://github.com/openwrt/packages/issues/16085

Fixes #16085

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 977109e286)
2021-07-18 00:58:28 -03:00
Stan Grishin
48576dba7a vpn-policy-routing: update to 0.3.5-1
support for 21.02.0-rc2 and up
support for reloading a single interface on ifup/ifupdate
rename config file
updated shellcheck compatibility
remove obsolete create/remove_lock
interface processing optimizations to speed up reloads
drop dependency on curl in user scripts
uniform styling of functions

Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-07-18 00:33:57 +00:00
Alexandru Ardelean
a0183d3f68 stress-ng: bump to version 0.12.10
Patch `010-soft-float.patch` can be dropped.
It was upstreamed via https://github.com/ColinIanKing/stress-ng/pull/126

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 6f48074e79)
2021-07-16 20:29:16 -07:00
Alexandru Ardelean
0805c11997 stress-ng: bump to version 0.12.07
Refreshed patch.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 96692fa6c1)
2021-07-16 20:29:16 -07:00
Alexandru Ardelean
43a391e5fd stress-ng: bump to version 0.12.06
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 940492c577)
2021-07-16 20:29:16 -07:00
Alexandru Ardelean
752da2a8b9 stress-ng: bump to version 0.12.04
Refreshed patch.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 987c82cc73)
2021-07-16 20:29:16 -07:00
Luiz Angelo Daros de Luca
23925c77a7 ruby: update to 3.0.2
This release fixes some bugs and these vulnerabilities:

* CVE-2021-31810: Trusting FTP PASV responses vulnerability in Net::FTP
* CVE-2021-32066: A StartTLS stripping vulnerability in Net::IMAP
* CVE-2021-31799: A command injection vulnerability in RDoc

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit 1b41e8f641)
2021-07-16 16:07:23 +02:00
Rosen Penev
2b73ad0483 Merge pull request #16119 from commodo/python-updates1-21.02
[21.02] python-{simplejson,cffi}: bump versions
2021-07-15 11:44:35 -07:00
Rosen Penev
e67f5868a7 Merge pull request #16125 from jefferyto/addrwatch-fixes-openwrt-21.02
[openwrt-21.02] addrwatch: Various fixes
2021-07-15 11:42:00 -07:00
Rosen Penev
1d3a342f6b Merge pull request #16128 from 1715173329/yq-2102
[openwrt-21.02] yq: Update to 4.9.8
2021-07-15 11:41:42 -07:00
Nick Hainke
dd1930f032 dawn: update to 2021-07-11
ec9a3a9 fix GCC11 compilation

Thanks to neheb and cotequeiroz.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit ee4616fb43)
2021-07-15 18:58:07 +02:00
Nick Hainke
c6fcfda213 dawn: update to 2021-07-08
555268b ubus: filter neighbors by SSID when preparing nr
3db9607 data storage: match SSID when searching ap entry
a22f5a7 storage: ensure SSID strings are NULL-terminated

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 163ccbf023)
2021-07-15 18:58:07 +02:00
Tianling Shen
8aeb26b413 yq: Update to 4.9.8
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 855e5b6eb5)
2021-07-15 17:25:58 +08:00
Jeffery To
cc78ba6b58 addrwatch: Various fixes
Makefile changes include:

* Remove USE_UCLIBC, as uclibc is no longer supported

* Package output modules

* Move main binary (back) to /usr/sbin, as it is system administration
  related and requires superuser privileges

New patches:

* 003-add-space-for-null-byte.patch - from
  374cfd2cab

* 004-more-specific-library-linking.patch - from
  27b57d9da3

* 005-use-c99-format-macro-constants.patch - from
  https://github.com/fln/addrwatch/pull/28

Init script changes include:

* Change from explicit disable to explicit enable, so that the service
  is disabled by default and on first install

* Set config option default values to default values of the main binary

* Fix command-line option names and format (from
  https://forum.openwrt.org/t/cant-start-addrwatch-service/60499/3)

* Always use the --quiet command-line option, as the procd instance is
  not configured to capture stdout/stderr

* Change the syslog config option to start the syslog output module

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 31ae85bca9)
2021-07-15 15:51:35 +08:00
James Vorderbruggen
6a24f88c3b yggdrasil: allow HTTPS connections
Signed-off-by: James Vorderbruggen <jamesvorder@gmail.com>
(cherry picked from commit ffff347396)
2021-07-14 12:27:58 -07:00
George Iv
0a5ab68823 yggdrasil: bump to 0.3.16
Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>
(cherry picked from commit 76b642b50f)
2021-07-14 12:27:58 -07:00
Alexandru Ardelean
79417f0a37 python-cffi: bump to version 1.14.6
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit e08b94b753)
2021-07-14 11:22:04 +03:00
Alexandru Ardelean
02a0c8a4fb python-simplejson: bump to version 3.17.3
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 3f2d7052743500e993a5f4a39cef0dc0eaac4d60)
2021-07-14 09:41:10 +03:00
Etienne Champetier
1954ed36ab openvpn: enable LZO support by default for OpenSSL variant
User that don't control both OpenVPN client and server
might still need LZO support, so keep it enable by default for at least
OpenSSL variant.

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 03c3c92496)
2021-07-13 11:51:46 -04:00
Josef Schlehofer
827fa8e21f syslog-ng: disable mqtt
For now, disable mqtt as it was automatically enabled as the build
system finds compiled libpaho-mqtt-c and requires dependency.

---
Here is the output:
Package syslog-ng is missing dependencies for the following libraries:
libpaho-mqtt3c.so.1
---

This is a new feature since syslog-ng 3.33.1 and if anyone is interested
in it, it can be enabled.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e319e89fde)
2021-07-12 16:17:35 +02:00
Florian Eckert
f584949682 mwan3: bump PKG_VERSION to 2.10.11
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 44d79147ea)
2021-07-12 09:53:48 +02:00
Florian Eckert
7e71550f14 mwan3: add troublshoot command from LuCI
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 619b721c2f)
2021-07-12 09:53:25 +02:00
Florian Eckert
4f5b05ab8c mwan3: cleanup help output
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit a9dac71e3d)
2021-07-12 09:53:06 +02:00
Josef Schlehofer
588d781dfb syslog-ng: update to version 3.33.1
- Release notes:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.33.1

- Bump version in config
It fixes:
WARNING: Configuration file format is too old, syslog-ng is running in compatibility mode. Please update it to use the syslog-ng 3.33 format at your time of convenience. To upgrade the configuration, please review the warnings about incompatible changes printed by syslog-ng, and once completed change the @version header at the top of the configuration file; config-version='3.31'

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 2b4be08a8c)
2021-07-12 06:16:53 +02:00
Josef Schlehofer
8f284fa00d Merge pull request #16088 from turris-cz/21.02/lxc-change-gpgkeyserver
lxc: add patch to switch GPG server
2021-07-11 20:44:19 +02:00
Rosen Penev
56d7a225e2 apache: update to 2.4.48
Refreshed patch.

Fixes:

CVE-2019-17567
CVE-2020-13938
CVE-2020-13950
CVE-2020-35452
CVE-2021-26690
CVE-2021-26691
CVE-2021-30641
CVE-2021-31618

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 6dfd07097d)
2021-07-11 12:00:52 +02:00
Rosen Penev
bed3caea8a Merge pull request #16093 from Andy2244/samba-4.14.5_(21)
[21.02] samba4: update to 4.14.5
2021-07-11 00:10:49 -07:00
Rosen Penev
f66e5a184a Merge pull request #16092 from Andy2244/libtirpc-1.3.2_-21]
[21.02] libtirpc: update to 1.3.2
2021-07-11 00:10:44 -07:00
Rosen Penev
e490f89de7 Merge pull request #16091 from Andy2244/rpcbind-1.2.6_-21]
[21.02] rpcbind: update to 1.2.6
2021-07-11 00:10:36 -07:00
Rosen Penev
1d662b100a Merge pull request #16090 from Andy2244/softethervpn-5.02.5180_(21)
[21.02] softethervpn5: update to 5.02.5180
2021-07-11 00:10:32 -07:00
Rosen Penev
e36ffd6a65 Merge pull request #16094 from Andy2244/wsdd2-git-2021-06-28_(21)
[21.02] wsdd2: update to git 2021-06-28
2021-07-11 00:10:26 -07:00
Daniel Golle
e11d70d0c0 transmission: add new syscalls to seccomp filter
Testing showed that additional syscalls are needed on ARMv7.
Add "getegid32", "geteuid32", "getgid32" and "getrandom" as they are
all innocent.
Bump PKG_RELEASE.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 1141ee1e51
and commit a78e527012)
2021-07-10 22:58:48 +01:00
Josef Schlehofer
ee11ce67a2 netdata: update to version 1.30.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 1d532fa545)
2021-07-10 22:29:33 +02:00
Andy Walsh
3ac73fa18b wsdd2: update to git 2021-06-28
* update to git 2021-06-28
* add extra startup delay

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-07-10 21:11:11 +02:00
Andy Walsh
7723235f47 samba4: update to 4.14.5
* update to 4.14.5
* refresh patches

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-07-10 21:09:29 +02:00
Andy Walsh
a2a9702f8a softethervpn5: update to 5.02.5180
* update to 5.02.5180
* add dep: libsodium

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-07-10 21:07:47 +02:00
Andy Walsh
104af774c6 rpcbind: update to 1.2.6
* update to 1.2.6
* remove upstream merged patch

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-07-10 20:56:50 +02:00
Andy Walsh
90341aa793 libtirpc: update to 1.3.2
* update to 1.3.2

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-07-10 20:54:53 +02:00
Josef Schlehofer
c66b3dc45a lxc: add patch to switch GPG server
By default, there was used sks-keyservers.net pool, which has invalid
SSL certificate and they also announced that their service is deprecate
and no longer maintained.

Use the same GPG server as LXC is using by default in the newer
releases.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-07-10 18:05:53 +02:00
Josef Schlehofer
d948dc938b Merge pull request #16065 from 1715173329/yq-2102
[openwrt-21.02] yq: Update to 4.9.7
2021-07-08 06:22:32 +02:00
Tianling Shen
a5a176d867 yq: Update to 4.9.7
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit faf915e97d)
2021-07-07 20:33:01 +08:00
Rosen Penev
ea8d0d246e Merge pull request #16050 from nxhack/2102_libuv_CVE-2021-22918
[21.02] libuv: fix CVE-2021-22918
2021-07-06 23:02:17 -07:00
Alexandru Ardelean
4bc55dd043 python3: do a simple ls on pip & setuptools if not selected for build
I seem to forget to check/select setuptools and pip (that come bundled with
Python).
This change will do a simple 'ls' on the 2 wheel files, so that the build
fails even if just building Python.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-07-06 16:20:30 +02:00
Alexandru Ardelean
ef50ed85a5 python3: update to version 3.9.6
Refreshed patches.
Bumped pip to 21.1.3.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 44e009364f)
2021-07-06 16:20:30 +02:00
Daniel Golle
033b04ee70 mwan3: use default routes from additional tables
Until now the additional tables listed in gobal 'rt_table_lookup' were
not considered for interfaces.
In order to be able to also use interface-defined routes from tables
other than main, consider also tables listed in 'rt_table_lookup'.
Update version to 2.10.10 as requested by maintainer.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit cb02b42007)
2021-07-06 08:00:17 +02:00
Hirokazu MORIKAWA
790a49c09f libuv: fix CVE-2021-22918
idna: fix OOB read in punycode decoder

libuv was vulnerable to out-of-bounds reads in the uv__idna_toascii()
function which is used to convert strings to ASCII. This is called by
the DNS resolution function and can lead to information disclosures or
crashes.

b7466e31e4
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=990561
https://nodejs.org/en/blog/vulnerability/july-2021-security-releases/

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-07-06 14:02:43 +09:00
Nikos Mavrogiannopoulos
bfd2ad7a09 Merge pull request #16015 from DeathCamel58/openconnect-backport-iconv/intl-fixes
openconnect: backport iconv/intl fix
2021-07-05 19:43:08 +02:00
Rosen Penev
99c42c4b3e Merge pull request #16042 from commodo/django-bump-21.02
[21.02] django: bump to version 3.2.5
2021-07-05 02:54:56 -07:00
Alexandru Ardelean
c605f4cb4c django: bump to version 3.2.5
Several bug-fixes.
Fix CVE-2021-35042

Release notes:
  https://docs.djangoproject.com/en/3.2/releases/3.2.5/

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 3ee863421a675c41848261a17df145716a23d907)
2021-07-05 10:48:42 +03:00
Rosen Penev
23a799a7db Merge pull request #16013 from commodo/python-dateutil-21.02
[21.02] python-dateutil: add setuptools-scm build dep
2021-07-03 15:16:37 -07:00
Rosen Penev
8a2619b8ca Merge pull request #16024 from rs/nextdns-1.34.2-openwrt-21.02
[21.02] nextdns: Update to version 1.34.2
2021-07-03 15:15:37 -07:00
Olivier Poitrey
63ca71937f nextdns: Update to version 1.34.2
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-07-02 18:54:54 +00:00
Baptiste Jonglez
57ed36db42 tessdata: uncompress tarball only once to speed up builds
The previous approach was to uncompress N times a big tarball (638 MB)
where N=130 is the number of supported languages.  Each iteration would
only extract a single file, but it still needs to uncompress the whole
tarball.  This is of course completely inefficient.

Now, we uncompress the tarball only once to extract all relevant files,
and then iterate N times to copy the file needed for each language.

This massively speeds up builds, at the expense of temporarily requiring
more build space (about 1 GB more)

Signed-off-by: Baptiste Jonglez <git@bitsofnetworks.org>
(cherry picked from commit 7fe513971f)
2021-07-02 20:37:50 +02:00
Rosen Penev
3d7d41f712 tessdata: update to 2.1.0
Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 37bffba074)
2021-07-02 20:37:45 +02:00
Dylan Corrales
7d9210015d openconnect: backport iconv/intl fix
This was pulled from #14741. #14734 affects me as well on Debian 11.

Signed-off-by: Dylan Corrales <deathcamel58@gmail.com>
2021-07-02 12:11:03 -04:00
Alexandru Ardelean
5201d8739c python-dateutil: add setuptools-scm build dep
Following:
  https://github.com/openwrt/packages/pull/16004
  https://github.com/openwrt/packages/pull/15995
  https://github.com/openwrt/packages/issues/15988

It seems that dateutil requires setuptools-scm to be installed.
As such, this is being added as a dependency.

Also, bump setuptools-scm to version 6.0.1

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit e2026346cc)
2021-07-02 16:23:23 +03:00
Dirk Brenken
c2657a2e96 adblock: update 4.1.3-2
* add a tcpdump option to resolve IPs in adblock reporting,
  set 'adb_represolve' accordingly (disabled by default). If enabled
  tcpdump will perform a reverse DNS (PTR) lookup for each IP address
* add 'stalkerware' source (provided by @astryzia)
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit e5fd19d2e0)
2021-07-01 06:31:56 +02:00
Oskari Rauta
8e1a8026b9 crun: update to 0.20
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 0b609eb373)
2021-06-30 18:34:45 +02:00
Oskari Rauta
15b873947c crun: bump to version 0.19.1
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 616d867e48)
2021-06-30 18:34:32 +02:00
Eneas U de Queiroz
dae7bdd915 crun: Don't build on arc
The package needs libseccomp, which does not currently support arc.
In order to avoid a circular dependency, we must avoid arc here as well.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 048e1d2d63)
2021-06-30 18:34:19 +02:00
Oskari Rauta
08abbfd9b4 crun: add package crun
crun is the prefered container run-time of podman, it's faster than
runc and has a much lower memory footprint.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 01d1a4969e)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Fixes: #15870
2021-06-30 18:33:54 +02:00
Daniel Golle
0f395b9947 auc: update to version 0.1.8
This fixes support for x86, auc now selects the right combined image
depending on the system being booted in EFI mode or not.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 1204cb82f9)
2021-06-30 13:43:57 +01:00
Niels Widger
51dd1c1fdb delve: add package
Signed-off-by: Niels Widger <niels@qacafe.com>
2021-06-29 20:56:18 +03:00
Rosen Penev
e81fa692af Merge pull request #15987 from G-M0N3Y-2503/backport-cache-domains-fix-wildcard
cache-domains: Fixed missing wildcard entries
2021-06-28 16:34:40 -07:00
Gerard Ryan
3fef9fffa7 cache-domains: Fixed missing wildcard entries
The fix requires the use of the generated dnsmasq `lancache.conf` file.
So I moved configuration of the hosts directory out of the UCI and into
the generated dnsmasq configuration file to simplify the script.

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-06-27 17:29:02 +10:00
Rosen Penev
dc67b2a183 Merge pull request #15976 from rs/nextdns-1.33.11-openwrt-21.02
[21.02] nextdns: Update to version 1.33.11
2021-06-26 12:43:56 -07:00
Olivier Poitrey
24e67d6fa7 nextdns: Update to version 1.33.11
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-06-26 18:00:32 +00:00
Dirk Brenken
4692a31beb travelmate: startup fixes
* fix a possible race condition during boot
* use the new "device" syntax in the network wizard

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit e407566cce)
2021-06-25 23:19:21 +02:00
Rosen Penev
6b85a951c5 Merge pull request #15940 from mkrkn/openwrt-21.02
[21.02] openvpn: update to 2.5.3
2021-06-23 16:42:51 -07:00
Magnus Kroken
29eab35c68 openvpn: update to 2.5.3
Remove upstreamed patch and fix test.sh script.

Signed-off-by: Magnus Kroken <mkroken@gmail.com>
2021-06-23 22:00:04 +02:00
Alexandru Ardelean
1216b02d4b tcpreplay: bump to version 4.3.4
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 7436d944fa)
2021-06-22 14:33:16 +02:00
Alexandru Ardelean
56e4da231d python-lxml: bump to version 4.6.3
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 89a6254b0a)
2021-06-22 14:33:16 +02:00
Alexandru Ardelean
535bcdb578 pillow: bump to version 8.1.2
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit c6f8536efa)
2021-06-22 14:33:16 +02:00
Florian Eckert
1e01952ce8 ddns-scripts: get l3 device for bind network using curl
If pppoe is used for wan access. script set 'eth1' as interface for curl
call. The correct interface is however 'pppoe-wan'.

The script uses 'network_get_physdev' function to get real device for
bind_network but this is wrong. We need instead the l3_device of the the
logical interface.

In case if we don't use pppoe connection - 'l3_device' is equal to real device.

This was reported by the github user `welderpb` with P/R:
 https://github.com/openwrt/packages/pull/14431

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 036079b308)
2021-06-22 10:24:49 +02:00
Wenli Looi
99f838dd6d ddns-scripts: Fix for domains with dash
Signed-off-by: Wenli Looi <wlooi@ucalgary.ca>
(cherry picked from commit 9e2aad3fde)
2021-06-22 10:24:38 +02:00
Wenli Looi
12cd693294 ddns-scripts: Fix for wildcard subdomain
Signed-off-by: Wenli Looi <wlooi@ucalgary.ca>
(cherry picked from commit 93344aafa0)
2021-06-22 10:24:12 +02:00
Josef Schlehofer
5fa605a1fa Merge pull request #15924 from nxhack/2102_icu_691
[21.02] icu: bump to 69.1
2021-06-20 10:04:24 +02:00
Hirokazu MORIKAWA
0db86f4184 icu: bump to 69.1
ICU 69 updates to CLDR 39 locale data with many additions and corrections. ICU 69 also includes significant improvements for measurement unit formatting and number formatting in general, as well as many other bug fixes and enhancements.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-06-20 14:16:04 +09:00
Rosen Penev
5dbac90c0e Merge pull request #15909 from mlichvar/21.02-chrony-fix-uci-allow
[21.02] chrony: fix uci NTP access configuration
2021-06-19 13:13:15 -07:00
Miroslav Lichvar
c45c0a1d40 chrony: fix uci NTP access configuration
The chrony interface hotplug script reuses the handle_allow function
from the init script to allow NTP access on interfaces specified in uci.
The function requires /lib/functions/network.sh. Include the file in the
hotplug script to make the function work as expected.

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2021-06-19 13:32:16 +02:00
Rosen Penev
b033c0dcda Merge pull request #15901 from nxhack/2102_node_14171
[21.02] node: bump to 14.17.1
2021-06-19 00:41:33 -07:00
Rosen Penev
b206227ec3 Merge pull request #15905 from 1715173329/yq-2102
[openwrt-21.02] yq: Update to 4.9.6
2021-06-19 00:41:06 -07:00
Chen Minqiang
69e4207965 schroot: fix typo
Signed-off-by: Chen Minqiang <ptpt52@gmail.com>
(cherry picked from commit 2b52fb6221)
2021-06-18 23:44:10 +02:00
Jan Pavlinec
1cc5bad232 knot-resolver: change scheduling priority
This should prevent some resolving issues by other router app.

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 1d1eca32db)
2021-06-18 17:25:24 +02:00
Andy Walsh
77d5d0cba4 samba4: update to 4.13.9
* update to 4.13.9

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
(cherry picked from commit 2057fc9ee4)
2021-06-18 17:25:15 +02:00
Tianling Shen
ce17b9e8f1 yq: Update to 4.9.6
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 6c6b74b8f8)
2021-06-18 22:58:35 +08:00
Alexandru Ardelean
c3b06713b9 python-cryptography: bump to version 3.4.7
Dropped patches:
  0004-Replace-EVP_CIPHER_CTX_cleanup-with-EVP_CIPHER_CTX_r.patch
  0005-Switch-get_-Update-APIs-to-get0.patch

Reworked patches:
  0001-Add-new-ASN1_STRING_get0_data-API.patch
  0006-Add-X509_STORE_CTX_trusted_stack-compatibility-macro.patch
These 2 require that we keep only the CUSTOMIZATIONS stuff for now. Maybe
later we can drop this.

Ran 'make package/python-cryptography/refresh'.

Added patch:
  0004-disable-rust.patch
upstream did a sloppy job with the CRYPTOGRAPHY_DONT_BUILD_RUST logic; we
need to patch it, to make sure the setuptools-rust isn't installed.
We may need to carry this patch in our tree for a bit longer than upstream,
because in newer versions, CRYPTOGRAPHY_DONT_BUILD_RUST logic gets removed.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 01d1b4581e)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-06-18 13:06:26 +03:00
Hirokazu MORIKAWA
4c22932e23 node: bump to 14.17.1
Notable Changes:
deps: update ICU to 69.1 (Michaël Zasso)
errors: align source-map stacks with spec (Benjamin Coe)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-06-18 18:06:04 +09:00
Dirk Brenken
26be379c82 banip: refine/fix nginx search pattern
* fix issue with nginx search pattern reported in forum support thread

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 0c16840e26)
2021-06-17 22:28:29 +02:00
Hannu Nyman
a1dc635481 nano: update to 5.8
Update nano editor version to 5.8.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 6f2ac237a1)
2021-06-17 19:04:40 +03:00
Daniel Golle
f69d625ac4 auc: compare versions using dpkg/opkg's verrevcmp
Using strcmp() to compare a version string doesn't work well.
Use verrevcmp() function from opkg instead.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 794cf3ac59,
as it was previously skipped also switch PKG_REVISION back to manual
to keep it in sync with master branch)
2021-06-16 12:23:40 +01:00
Alexandru Ardelean
92744fd598 django: bump to version 3.2.4
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 24a8f58741)
2021-06-15 14:58:30 +03:00
Daniel Golle
a8ae03f889 auc: update to version 0.1.7
No longer fail in case a package is part of multiple lists (which may
happen temporarily in case it becomes 'nonshared').
Bump version to prepare for sync accross branches.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 9150e82768)
2021-06-15 10:52:09 +01:00
Daniel Golle
09fc258b54 auc: fix several issues
* don't segfault if server reply is incomplete
 * always request 'generic' image on x86/generic and x86/64
 * make SNAPSHOT branches sticky, eg. stay on 21.02-SNAPSHOT and do
   not 'upgrade' to 21.02.0-rc2.
 * output requested server URL when debugging

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 02bc1fc929)
2021-06-15 10:51:53 +01:00
Daniel Golle
1304580682 auc: support queue_position status from server
Display position in queue while waiting for build.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 5b7ff1ad65)
2021-06-15 10:51:53 +01:00
Florian Eckert
0fa45cf137 dockerd: refactoring uciadd and ucidel handling
This change makes the handling of adding and deleting interface, device
bridge and firewall more robust.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 0fded274ec)
2021-06-15 11:32:24 +02:00
Jeffery To
5c43da5e10 python3: Add readline to dependency finder script
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 1eeeba60d8)
2021-06-15 08:57:00 +03:00
Hirokazu MORIKAWA
4e75a8fb85 mg: bump to 6.9
Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-06-15 08:56:17 +03:00
Josef Schlehofer
e738d2faf1 Merge pull request #15857 from jefferyto/python3-readline-openwrt-21.02
[openwrt-21.02] python3: add python3-readline subpackage
2021-06-14 09:53:33 +02:00
Dirk Brenken
7d8213dc8d banip: update 0.7.9
* add switch 'ban_fetchinsecure' to allow insecure downloads
  without certificate check (disabled by default)
* better explain 'ban_fetchparm' in readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 945513860d)
2021-06-14 06:35:34 +02:00
Dirk Brenken
45935d65a8 adblock: update 4.1.3
* fix a small json syntax issue in adblock.sources
* add easylist addon to reg_fr source
* add switch 'adb_fetchinsecure' to allow insecure downloads
  without certificate check (disabled by default)
* better explain 'adb_fetchparm' in readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 74dec65b61)
2021-06-14 06:33:18 +02:00
Alexandru Ardelean
608a7422e0 python3: add python3-readline subpackage
Python3 comes with a built-in readline module. It wasn't included up until
now; mostly because it wasn't considered.

This change introduces it as a sub-package of the main Python3 package.
readline support is included in Python.

libreadline pulls libncursesw as a package, so python3-ncurses was
updated to pull libncursesw as well.
It should be the same package; mostly done for consistency.

Resolves the issue reported here:
  https://forum.openwrt.org/t/python3-repl-missing-readline/90039

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 49faf5d7ca)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-06-14 02:28:02 +08:00
Rosen Penev
e49cd72869 btrfs-progs: update to 5.11
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 95935f2baf)
2021-06-13 09:47:04 +02:00
Rosen Penev
09a422c97a shairport-sync: update to 3.3.8
Explicitly add libdaemon configure flag. It seems the default was
changed.

Add AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 94bc8a127c)
2021-06-12 16:09:16 -07:00
Rosen Penev
e0c2907e9c Merge pull request #15840 from jefferyto/python-twisted-tls-conch-openwrt-21.02
[openwrt-21.02] python-twisted: Add tls/conch dependencies
2021-06-12 13:58:09 -07:00
Jeffery To
f66c5950ff python-twisted: Add tls/conch dependencies
By adding these dependencies, it is much easier for users (both
applications that use Twisted and end users) to have secure
communications by default.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8349546208)
2021-06-12 19:01:35 +08:00
Josef Schlehofer
4f453177e4 Merge pull request #15836 from jefferyto/python-twisted-21.2.0-openwrt-21.02
[openwrt-21.02] python-twisted: Update to 21.2.0, redo patches
2021-06-12 01:20:59 +02:00
Jeffery To
f295e21aa9 python-twisted: Update to 21.2.0, redo patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 4b6e05d1fd)
2021-06-12 06:22:52 +08:00
Rosen Penev
3c522bb4ae Merge pull request #15827 from jefferyto/python-package-updates-openwrt-21.02
[openwrt-21.02] python-six,et_xmlfile, django: bump package versions
2021-06-11 13:25:24 -07:00
Josef Schlehofer
bae049fa51 Merge pull request #15834 from jefferyto/python-incremental-21.3.0-openwrt-21.02
[openwrt-21.02] python-incremental: Update to 21.3.0, refresh patch
2021-06-11 22:16:52 +02:00
Josef Schlehofer
65a4945927 Merge pull request #15831 from jefferyto/python-zope-interface-5.4.0-openwrt-21.02
[openwrt-21.02] python-zope-interface: Update to 5.4.0
2021-06-11 22:16:30 +02:00
Josef Schlehofer
6abed847a5 Merge pull request #15829 from jefferyto/python-attrs-21.2.0-openwrt-21.02
[openwrt-21.02] python-attrs: Update to 21.2.0
2021-06-11 22:16:15 +02:00
Jeffery To
cac4f5fa73 python-incremental: Update to 21.3.0, refresh patch
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit b2738e9da6)
2021-06-12 02:19:52 +08:00
Jeffery To
f082f8150f python-zope-interface: Update to 5.4.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit ffbde739c6)
2021-06-11 23:46:35 +08:00
Karl Palsson
dbc5434a42 net/mosquitto: Update to 2.0.11
This is a security and bugfix release.

Full release notes: https://mosquitto.org/blog/2021/06/version-2-0-11-released/

Fixes a remotely triggered memory leak
Fixes broker reconnections in certain failure situations
Fixes (non-standard) qos0 queuing

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-06-11 15:30:50 +00:00
Jeffery To
86fe94bdaf python-attrs: Update to 21.2.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0dbb3769f3)
2021-06-11 22:57:53 +08:00
Alexandru Ardelean
958b495b37 python-idna: bump to version 3.2
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit fe698b5fca)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-06-11 16:49:51 +02:00
Alexandru Ardelean
96ee760579 django: bump to version 3.2.3
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 5a70c9e826)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-06-11 21:37:54 +08:00
Alexandru Ardelean
607b39494a et_xmlfile: bump to version 1.1.0
Updating Eneas' email as requested on Github:
  https://github.com/openwrt/packages/pull/15622

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 6185156e69)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-06-11 21:37:42 +08:00
Alexandru Ardelean
e60ade49c2 python-six: bump to version 1.16.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit cf368395d0)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-06-11 21:37:29 +08:00
Alexandru Ardelean
69304783ec django: bump to version 3.2
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit c01d0f16cf)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-06-11 21:37:08 +08:00
Josef Schlehofer
2682fa5039 Merge pull request #15824 from jefferyto/golang-1.16.5-openwrt-21.02
[openwrt-21.02] golang: Update to 1.16.5
2021-06-11 11:32:11 +02:00
Jeffery To
7f2db681f1 golang: Update to 1.16.5
1.16.1 included fixes for:

* CVE-2021-27918 - encoding/xml: infinite loop when using
  xml.NewTokenDecoder with a custom TokenReader
* CVE-2021-27919 - archive/zip: can panic when calling Reader.Open

1.16.4 included fixes for:

* CVE-2021-31525 - net/http: ReadRequest can stack overflow due to
  recursion with very large headers

1.16.5 includes fixes for:

* CVE-2021-33195 - net: Lookup functions may return invalid host names
* CVE-2021-33196 - archive/zip: malformed archive may cause panic or
  memory exhaustion
* CVE-2021-33197 - net/http/httputil: ReverseProxy forwards Connection
  headers if first one is empty

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit fe3c49fe07)
2021-06-11 16:58:05 +08:00
Nick Hainke
5342be8198 samplicator: add samplicator
Samplicator receives UDP datagrams on a given port and resends those
datagrams to a specified set of receivers.

Use Cases:
- replicate Flow Samples to multiple receivers
- use with conntrackd to synchronize via unicast to multiple targets

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 41534e5a19)
2021-06-10 11:58:52 +02:00
Rosen Penev
74ee814b31 Merge pull request #15812 from G-M0N3Y-2503/docker-20.10.7-backport
Docker 20.10.7
2021-06-09 14:07:49 -07:00
Gerard Ryan
4ab37fd2a5 docker: Updated to 20.10.7
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-06-09 21:19:45 +10:00
Gerard Ryan
e8f023e7f2 dockerd: Updated to 20.10.7
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-06-09 21:19:45 +10:00
Gerard Ryan
c6f2c9ba86 libnetwork: Updated to 2021-05-25 for docker 20.10.7
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-06-09 21:19:45 +10:00
Gerard Ryan
196058bdcc containerd: Updated to 1.4.6 for docker 20.10.7
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-06-09 21:19:45 +10:00
Gerard Ryan
3193a6b02f runc: Updated to 1.0.0-rc95 for docker 20.10.7
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-06-09 21:19:45 +10:00
David Bauer
a70f99a912 Merge pull request #15782 from blocktrron/pr-2102-xr_usb_serial_common
xr_usb_serial_common: fix kernel 5.4 builds
2021-06-08 10:01:14 +02:00
Rosen Penev
09bc463ac2 Merge pull request #15799 from PolynomialDivision/gpsd-2102
[21.02] Pull latest changes from gpsd
2021-06-07 19:20:05 -07:00
Nick Hainke
4a28b7fad3 gpsd: fix compilation with x86 glibc
The sysroot has to point to the toolchain directory. The directory
includes libraries like libm. However, the STAGING_DIR needs to be
added to the CFLAGS.

Fixes #15773

[As suggested by jow]

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 35b18ddfc4)
2021-06-07 22:18:54 +02:00
ekathva advaita
74a63743c7 gpsd: Add a new package gpsd-utils to add gpsdctl
gpsd-utils include management tools for GPS daemon - and this commmit
particularly introduces gpsdctl to add/remove device from the GPS
daemon's device list over control socket.

Signed-off-by: ekathva advaita <ekathva@hotmail.com>
(cherry picked from commit a86c3666f3)
2021-06-07 22:18:50 +02:00
Rosen Penev
ed7b332ed4 Merge pull request #15790 from DeathCamel58/libnet-config-21.02
[21.02] libnet-1.2.x: Export libnet-config in development environments
2021-06-06 12:50:15 -07:00
Dylan Corrales
81c4a9afcf libnet: Export libnet-config in development environments
Affects: libnet
Ref: Issue #15767, PR#15770

Signed-off-by: Dylan Corrales <deathcamel58@gmail.com>
2021-06-06 11:44:53 -04:00
Rosen Penev
aa97f703a0 Merge pull request #15779 from stangri/21.02-https-dns-proxy
[21.02] https-dns-proxy: update to 2021-06-03-1
2021-06-05 14:29:04 -07:00
David Bauer
ec7d12bd8e xr_usb_serial_common: fix kernel 5.4 builds
Building the xr_usb_serial module fails for Kenel 5.4 with CONFIG_PM
enabled:

xr_usb_serial_common.c:1574:15: error: 'ASYNCB_INITIALIZED' undeclared
(first use in this function); did you mean 'RCU_INITIALIZER'?

Use tty_port_initialized in order to determine the status of the TTY
port.

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 69cf7836df)
2021-06-05 16:00:54 +02:00
Stan Grishin
e548667f14 https-dns-proxy: update to 2021-06-03-1
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-06-04 23:34:08 +00:00
Rosen Penev
e6ac172a4f Merge pull request #15776 from 1715173329/xray-2102
[openwrt-21.02] xray-core: bump geodata to latest version
2021-06-04 15:08:39 -07:00
Tianling Shen
cef1cdaa2a xray-core: bump geodata to latest version
Also removed `fullcone` option as this is outdated.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 53bbfe4de5)
2021-06-04 20:49:18 +08:00
Rosen Penev
8e2b960f95 Merge pull request #15764 from jamesmacwhite/iperf-3.10.1-21.02
[21.02] iperf3: Update to version 3.10.1
2021-06-03 03:24:31 -07:00
James White
f63872382b iperf3: Update to version 3.10.1
Signed-off-by: James White <james@jmwhite.co.uk>
2021-06-03 09:09:58 +01:00
Rosen Penev
aa0382f440 Merge pull request #15760 from stangri/21.02-miniupnpd
miniupnpd: disable ext_ip_reserved_ignore by default; fix grammar
2021-06-02 20:23:24 -07:00
Nikos Mavrogiannopoulos
df351ba9c9 ocserv: updated to 1.1.3
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2021-06-02 09:08:24 +02:00
Rosen Penev
32e56591c3 Merge pull request #15727 from stangri/21.02-https-dns-proxy
[21.02] https-dns-proxy: 2021-05-14 bugfix: fallback to HTTP/1 by default
2021-06-01 22:08:59 -07:00
Stan Grishin
cf5b982fe3 miniupnpd: disable ext_ip_reserved_ignore by default; fix grammar
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-06-02 04:56:56 +00:00
Stan Grishin
dab3db6218 https-dns-proxy: 2021-05-14 bugfix: fallback to HTTP/1 by default
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-06-02 04:32:25 +00:00
Rosen Penev
ac7b1eff06 Merge pull request #15658 from mattreeve/openwrt-21.02
[21.02] rsync: Add rrsync script
2021-06-01 16:58:28 -07:00
Josef Schlehofer
c7a50e06b3 msmtp: update to version 1.8.15
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 110abfb9f6)
2021-06-01 12:16:53 +02:00
Rosen Penev
87ce9112ea hwinfo: fix compilation with ARC
Added a small patch to fix compilation.

Renamed patch files to have a .patch suffix. Makes them easier to read
with vim and probably IDEs.

Remove UCLIBC depend since it's no longer present.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 6af7fbbf01)
2021-05-31 17:30:34 -07:00
Rosen Penev
86ac045a58 luajit: for powerpc, add FPU dependency
powerpc support as of 2.1 does not work with soft float.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d23ca0010c)
2021-05-31 17:27:22 -07:00
Peter Stadler
52bfda48d5 nginx-util: do not use fallthrough attribute
fixes issue #15653

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
(cherry picked from commit 49a84e9b22)
2021-05-31 17:25:22 -07:00
Rosen Penev
6ee4be3d2d Merge pull request #15638 from ErwanMAS/2102_tinc_allow_more_param_in_uci
[21.02] tinc: allow more parameter in uci
2021-05-29 16:04:04 -07:00
Rosen Penev
001691c2d5 Merge pull request #15716 from stangri/21.02-https-dns-proxy
[21.02] https-dns-proxy: update to 2021-05-14-1; bugfixes for dhcp server backup
2021-05-29 15:00:01 -07:00
Stan Grishin
05d9528ad2 https-dns-proxy: update to 2021-05-14-1; bugfixes for dhcp server backup
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-05-29 20:12:18 +00:00
Rosen Penev
920c4f29c5 Merge pull request #15700 from nxhack/2102_reduce_npm_size
[21.02] node: Reduce node-npm package size
2021-05-29 01:33:04 -07:00
Noah Meyerhans
5f181154a5 bind: bump to 9.17.13
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit 2e02d899ae)
2021-05-28 07:45:43 +02:00
Hirokazu MORIKAWA
23bec4e87b node: Reduce node-npm package size
Reduce package size by about 1MB.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-05-28 13:06:02 +09:00
Jan Pavlinec
e2b25c5036 python-cryptodomex: update to version 3.10.1
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit d6cb4edb4a)
2021-05-27 17:04:35 +02:00
Jan Pavlinec
4507dbe936 gitlab-runner: update to version 13.12.0
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit cbb572534c)
2021-05-27 17:03:45 +02:00
Jan Pavlinec
535e9f534e curl: update to version 7.77.0 (security fix)
Fixes:
CVE-2021-22897
CVE-2021-22898
CVE-2021-22901

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit ff58fc3a9c)
2021-05-27 17:03:37 +02:00
Tianling Shen
58cb63bc79 yq: Update to 4.9.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 499aba939d)
2021-05-24 20:05:45 +03:00
Michael Heimpold
515c87e43c Merge pull request #15655 from mhei/21.02-php7-update
[21.02] php7: backports updates and fixes
2021-05-20 07:28:08 +02:00
Matt Reeve
f9876aa81b rsync: Add rrsync script
Rrsync is a perl script that is supplied as an extra with the rsync program.
It must be used in conjunction with openssh-server or openssh-server-pam
as it requires ~/.ssh/authorized_keys which is not supported by dropbear.

Rrsync allows selective access to subdirectories in either read-only, write-only or read-write mode,
depending on settings in authorized_keys. This allows for safer, restrictive access.
It's particularly useful for automated backup purposes.

An example usage would be this entry:

command="/usr/bin/rrsync -ro /home" <public key here>

This would allow a system connecting with this public key to be able to rsync FROM the
/home directory tree only. It could not write to this directory, nor read from any other directory.

Signed-off-by: Matt Reeve <matt@mreeve.com>
(cherry picked from commit 081229aa09)
2021-05-19 09:51:14 +01:00
Michael Heimpold
23ddd34b8a php7: update to 7.4.19
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 4e39d9fc7c)
2021-05-18 23:37:39 +02:00
Michael Heimpold
d928a35e17 php7: update to 7.4.18
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit aaaeef8b63)
2021-05-18 23:37:39 +02:00
Eneas U de Queiroz
e984b731a8 php7-pecl-imagick: configure --with-imagick=...
Add --with-imagick=$(STAGING_DIR)/usr so that configure picks
MagickWand-config from there, before it finds an eventual host-installed
version.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit f434a33a13)
2021-05-18 23:37:39 +02:00
Jan Hoffmann
a9a6f50c03 vnstat2: update to version 2.7
Signed-off-by: Jan Hoffmann <jan@3e8.eu>
2021-05-18 21:51:03 +03:00
Tianling Shen
f680d17545 yq: Update to 4.9.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2a7114a1aa)
2021-05-18 12:29:58 +03:00
Erwan MAS
f7ce67e29d tinc: Add possibility to populate more config variables via uci
Signed-off-by: Erwan MAS <erwan@mas.nom.fr>
2021-05-17 20:19:44 -04:00
Alexandru Ardelean
8131eaf08c python3: bump version to 3.9.5
Refreshed Python patches.
Updated pip & setuptools version.

For pip, patch '001-pep517-pyc-fix.patch' was reworked.

Also, the current version of the bundled pip (21.1.1) no longer supports
Python2, so the 'py2.py3' suffix gets replaced with just py3.

For setuptools, there is no longer a script/module:
  https://github.com/pypa/setuptools/pull/2544

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit e312275dd9)
2021-05-17 13:12:31 +02:00
Alexandru Ardelean
bc4ebdc085 python3: introduce libpython3 with ABI_VERSION flag
Related to discussion:
  https://github.com/openwrt/packages/pull/14060

Every once in a while a version bump will occur that requires an ABI
change. Example: Python 3.8 to 3.9. When this happens some Python packages
would need to be rebuilt. In setups where everything gets rebuilt, this
isn't a problem.

It's usually a bigger problem when needing to upgrade something via
opkg.
To accommodate for this, we add a libpython with it's own ABI_VERSION
flag. If this ABI_VERSION changes, then this should propagate forward.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 27aee1fbf0)
2021-05-17 13:12:27 +02:00
Alexandru Ardelean
48fd33a730 python3: bump to version 3.9.4
For some reason Python3 jumped from 3.9.2 to 3.9.4 in about a week.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 156e2e354e)
2021-05-17 13:12:22 +02:00
Johnny Vogels
6a0d658f75 Bluez: Update to 5.56
Signed-off-by: Johnny Vogels <35307256+jmv2009@users.noreply.github.com>
(cherry picked from commit 7299ba0517)
2021-05-17 13:02:15 +02:00
Johnny Vogels
9072b66e56 Bluez: Update to 5.55
Signed-off-by: Johnny Vogels <35307256+jmv2009@users.noreply.github.com>
(cherry picked from commit d653862bd7)
2021-05-17 13:02:11 +02:00
Rosen Penev
b86383f038 znc: update to 1.8.2
Switch to CMake + Ninja to fix parallel compilation.

Switched PKG_BUILD_DIR to use PKG_INSTALL_DIR for easier readability.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b92f2c2bee)
2021-05-16 14:39:39 +02:00
Rosen Penev
701e3bff2d Merge pull request #15631 from nxhack/2102_node_14170
[21.02] node: bump to v14.17.0
2021-05-16 01:04:08 -07:00
Jan Pavlinec
a4c39c931c knot-resolver: update to version 5.3.2
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 112af34ff3)
2021-05-14 21:49:39 +02:00
W. Michael Petullo
d81ab573e6 syslog-ng: update to 3.32.1
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit f93ef64793)
2021-05-14 21:48:54 +02:00
Jan Hak
bba31b1b5b knot: update to version 3.0.6
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit d578f60818)
2021-05-14 21:48:06 +02:00
Jan Hak
ab9286520b knot: update to version 3.0.5
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit d92a2cd21b)
2021-05-14 21:47:59 +02:00
Ansuel Smith
dc90d02b47 atlas-sw-probe: fix missing link on sysupgrade
Recreate symbolic link if it's missing after a sysupgrade with a private and public key present in /etc/atlas/

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
(cherry picked from commit 6031330749)
2021-05-14 21:47:31 +02:00
Luiz Angelo Daros de Luca
826f9965be hplip: bump to 3.21.2
Patches refreshed:
* 010-libusb_fix.patch
* 020-remove_cups_dep_on_scan.patch
* 060-fix-uclibc.patch renamed to 060-fix-glibc.patch

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit 2014f1fd0b)
2021-05-14 21:47:11 +02:00
Alexander Ryzhov
d3a0084f48 libtalloc: add Python3/host dependency
Otherwise, Package/Configure won't find distutils module from python3/host

Signed-off-by: Alexander Ryzhov <github@ryzhov-al.ru>
(cherry picked from commit d9879cb200)
2021-05-14 21:38:31 +02:00
Miroslav Lichvar
2bd0bed011 chrony: update to 4.1
Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2021-05-14 08:08:03 +02:00
Hirokazu MORIKAWA
4258e21f81 node: bump to v14.17.0
Notable Changes:
Diagnostics channel (experimental module)
UUID support in the crypto module
Experimental support for AbortController and AbortSignal

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-05-13 15:52:37 +09:00
Rosen Penev
b63d8a32fc Merge pull request #15606 from 1715173329/yq-2102
[openwrt-21.02] yq: Update to 4.8.0
2021-05-11 10:28:37 -07:00
Tianling Shen
40104b2377 yq: Update to 4.8.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 915311c3dc)
2021-05-11 21:40:26 +08:00
Jan Pavlinec
1d9a8b3546 python-engineio: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 9e011b2fc8)
2021-05-08 10:52:47 +02:00
Jan Pavlinec
763f8b467b python-bidict: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit ae0556e6a5)
2021-05-08 10:52:31 +02:00
Alexandru Ardelean
672b7c1d82 python-greenlet: support MIPS architecture
Fixes: https://github.com/openwrt/packages/issues/15370

This is inspired from:
   330bc94dcc/lang/python-greenlet/Makefile

The `PKG_USE_MIPS16:=0` is not taken into consideration when building
Python modules. That's because the sysconfig is used.

This is only an issue with greenlet (on MIPS) so far.

One option is to do `PKG_USE_MIPS16:=0` in the core Python package.
But, since we know that the `wlanslovenija` group has successfully used
greenlet on MIPS with this construct, we might as well adopt it until GCC10
becomes the main compiler.

As noted here:
  https://github.com/openwrt/packages/issues/15370#issuecomment-817015484
GCC10 doesn't have this problem.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit bde027188a)
2021-05-08 10:44:01 +02:00
Jan Pavlinec
d2085c2231 python-greenlet: add new package
Notes:
Build is disabled for arc and mips because
greenlet isn't ported for these platforms

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 837f1b5924)
2021-05-08 10:43:52 +02:00
Jan Pavlinec
ba0b60f50a python-socketio: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit decbd7b43a)
2021-05-08 10:43:26 +02:00
Jan Pavlinec
96726c6ce4 python-eventlet: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit d303bd6aac)
2021-05-08 10:41:36 +02:00
Jan Pavlinec
be42ff8e99 python-pysocks: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 780fc502d2)
2021-05-08 10:41:19 +02:00
Jan Pavlinec
9c24b20a13 python-flask-socketio: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 8133922a02)
2021-05-08 10:41:04 +02:00
Jan Pavlinec
7eea426c98 python-flask-httpauth: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 6c9627b45d)
2021-05-08 10:40:50 +02:00
Jan Pavlinec
897f231378 gitlab-runner: update to version 13.11.0
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 2acbb04c77)
2021-05-08 01:12:59 +02:00
Jan Pavlinec
dae3432f7e onionshare-cli: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit ae069fad3d)
2021-05-08 01:12:38 +02:00
Jan Pavlinec
a727f9692f tailscale: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 229b34286d)
2021-05-08 01:12:03 +02:00
Daniel Golle
d54b6fe090 python-gnupg: update to version 0.4.7
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 7b32ab78c0)
2021-05-08 01:09:31 +02:00
Jan Hak
bb638ae4da libedit: update to version 20210419-3.1
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit b0870d792b)
2021-05-08 01:09:14 +02:00
Ansuel Smith
692b87b44c atlas-sw-probe: improve key creation
- Exit start if a probe_key is not present
- Add create_key command to generate a private_key based on the provided username in the atlas config.
- Add registration instruction in /etc/atlas
- Rework script to save probe_key on sysupgrade (the key are now adviced to be placed in the /etc/atlas dir and a link is used to make them accessible in the atlas-sw-scripts etc dir)

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
(cherry picked from commit 0afe371bab)
2021-05-08 01:08:14 +02:00
Daniel Golle
807bd76335 debian-archive-keyring: update to 2021.1.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 640a6ba9bd)
2021-05-08 01:07:22 +02:00
Daniel Golle
fe2e5c27f8 Jinja2: update to version 2.11.3
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit e70965b1aa)
2021-05-08 01:07:18 +02:00
Hirokazu MORIKAWA
d88cdaddf1 icu: add ABI_VERSION
To prevent inconsistencies in the coming version (69.1).

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 1eb29ddc95)
2021-05-08 01:07:01 +02:00
Andy Walsh
29ad9f1ee6 samba4: update to 4.13.8
* update to 4.13.8
* remove faulty io_uring kernel detection
* fixes CVE's: CVE-2020-27840, CVE-2021-20277, CVE-2020-27840, CVE-2021-20277, CVE-2020-27840, CVE-2021-20277, CVE-2021-20254
* resolves #15512

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
(cherry picked from commit 93b34d4dda)
2021-05-08 01:06:28 +02:00
Jan Pavlinec
8f15e531f9 unbound: add cache-max-negative-ttl config option
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 9296409e88)
2021-05-08 01:06:07 +02:00
Noah Meyerhans
1b6abeb46f bind: bump to 9.17.12
Fixes the following security issues:

* CVE-2021-25215 - named crashed when a DNAME record placed in the ANSWER
                   section during DNAME chasing turned out to be the final
                   answer to a client query.
* CVE-2021-25214 - Insufficient IXFR checks could result in named serving a
                   zone without an SOA record at the apex, leading to a
                   RUNTIME_CHECK assertion failure when the zone was
                   subsequently refreshed. This has been fixed by adding an
                   owner name check for all SOA records which are included
                   in a zone transfer.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit ccb1e8923e)
2021-05-08 01:05:42 +02:00
Aaron Goodman
2a1c0e11d4 mwan3: allow interfaces with no tracking IPs
In the procd refactor, support for interfaces with no tracking IPs was
inadvertentiy removed. This commit restores the previous behavior

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit b7ea19bc96)
2021-05-06 12:20:18 +02:00
Florian Eckert
1103ba54b6 mwan3: update ubus status for not tracked interfaces
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit f1da872cd4)
2021-05-06 12:20:07 +02:00
Florian Eckert
e3e651b11e mwna3: fix whitespace
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit cbc5f0916c)
2021-05-06 12:19:58 +02:00
Josef Schlehofer
67484bfa70 hwdata: update to version 0.347
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 22ae08919e)
2021-05-05 09:40:55 +02:00
Dirk Brenken
a69f07e5d8 banip: update to 0.7.8
* fix pid file processing of the background monitor plus child
  processes (bug reported in the forum)
* made the enabled/disabled switch of the background monitor functional

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1402b3b56d)
2021-05-04 20:09:33 +02:00
Hannu Nyman
10a45baa6f nano: update version to 5.7
Upgrade nano editor to version 5.7.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 765e986857)
2021-05-01 23:51:46 +03:00
Hirokazu MORIKAWA
fefa7c7770 icu: add ABI_VERSION
To prevent inconsistencies in the coming version (69.1).

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-05-01 17:26:16 +03:00
Christian Lachner
e9def406bb haproxy: Update HAProxy to v2.2.14
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2021-05-01 17:24:08 +03:00
Olivier Poitrey
d8c63ce29f nextdns: Update to version 1.32.1
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-04-30 17:26:49 -07:00
Dirk Brenken
d37803dc29 adblock: update to 4.1.2
* preserve DNS cache after adblock processing (unbound & bind)
* fix redirect issue with oisd basic url
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit df8651255f)
2021-04-30 17:09:06 +02:00
Rosen Penev
8a692578c5 Merge pull request #15526 from 1715173329/xray-2102
[openwrt-21.02] xray-core: remove PROVIDES
2021-04-28 17:25:53 -07:00
Moritz Warning
c2be25ea10 zerotier: update to 1.6.5
Minor ZeroTier update. Refreshed patches.

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2021-04-28 17:21:12 -07:00
Hirokazu MORIKAWA
ad6f5b23d7 libupm: Disable node.js support
Library for node.js will be disabled temporarily due to difficulty in supporting the latest node.js.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-04-28 01:21:53 -07:00
Josef Schlehofer
9d422d7ba9 Merge pull request #15508 from hswong3i/openwrt-21.02-SQUID_enable-ssl-crtd
[openwrt-21.02][cherry-pick] squid: Enable dynamic SSL certificate generation
2021-04-28 10:06:05 +02:00
Wong Hoi Sing Edison
d7f8f02574 squid: Enable dynamic SSL certificate generation
Maintainer: @neheb / @BKPepe / @zhanhb
Compile tested: ipq806x, generic, netgear_r7800, master
Run tested: ipq806x, generic, netgear_r7800, openwrt-19.07

Description:

Squid now only support HTTPS proxy in TCP tunnel mode (e.g. `ssl_bump splice all`):

    https_port 3128 ssl-bump tls-cert=/etc/squid/squid.pem generate-host-certificates=on
    ssl_bump splice all

In order to operate in SSL Bump mode, we need to compile with `--enable-ssl-crtd` for following configuration:

    https_port 3128 ssl-bump tls-cert=/etc/squid/squid.pem generate-host-certificates=on
    sslcrtd_program /usr/lib/squid/security_file_certgen -s /car/cache/squid/ssl_db -M 4MB
    ssl_bump stare all
    ssl_bump bump all

This PR switch the `SQUID_enable-ssl-crtd` into `default y`, therefore default enable SSL Bump mode.

Signed-off-by: Wong Hoi Sing Edison <hswong3i@pantarei-design.com>
(cherry picked from commit dbda77686d)
2021-04-28 11:28:40 +08:00
Hirokazu MORIKAWA
7358680c70 libmraa: Disable node.js support
Library for node.js will be disabled temporarily due to difficulty in supporting the latest node.js.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-04-27 18:52:56 -07:00
Josef Schlehofer
755ecdbd6e Merge pull request #15518 from 1715173329/yq-2102
[openwrt-21.02] yq: Update to 4.7.1
2021-04-28 00:01:57 +02:00
Tianling Shen
fee6ee1c8e xray-core: use $(INSTALL_DATA) to install configuration files
Using `$(INSTALL_CONF)` will cause the program has no access to
configurations file when someone enabled the selinux support.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(backported from bbc6c62c2a)
2021-04-27 20:35:39 +08:00
Tianling Shen
b75f619031 xray-core: remove PROVIDES
Xray now is no longer planning to keep compatibility with original
v2ray. Remove PROVIDES before it is totally broken.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(backported from 92efcc2956)
2021-04-27 20:35:20 +08:00
Tianling Shen
2a4742f353 yq: Update to 4.7.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(backported from 633d1dcf58)
2021-04-26 19:21:54 +08:00
Karl Palsson
407ef4d534 net/mosquitto: port is optional in root config
From mosquitto 2.x, port became optional and deprecated in the config,
and it was recommended that listeners be used instead.  Drop the hard
requirement in our config conversion script.

Reported in: https://github.com/openwrt/packages/issues/15506
Signed-off-by: <karlp@etactica.com>
2021-04-26 09:38:42 +00:00
Karl Palsson
547687319c net/mosquitto: fix log_type conversion in config
As reported in: https://github.com/openwrt/packages/issues/15506

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-04-26 09:38:42 +00:00
Rosen Penev
7119d559e9 ksmbd: update to 3.3.9
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 9c6fc23e01)
2021-04-24 02:20:36 -07:00
Rosen Penev
0ed095a527 ksmbd-tools: update to 3.3.9
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2e7c403fff)
2021-04-24 02:19:33 -07:00
Glenn Strauss
a3596cb8a7 lighttpd: patches from upstream
- ignore Content-Length from backend if 101 Switching Protocols
- close HTTP/2 connection after bad password
- skip cert chain build for self-issued certs
- meson zstd fix
- ls-hpack upstream update
- discard some HTTP/2 DATA frames received after response

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 52f85a0e1f)
2021-04-24 01:05:25 -07:00
Dirk Brenken
a0a6f09447 banip: fix housekeeping
* fix whitelist housekeeping if you switch between normal- and
  'whitelist only' mode

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 7cfb0f4657)
2021-04-23 17:46:29 +02:00
Florian Eckert
7a628d1432 Merge pull request #15502 from TDT-AG/pr/20210422-stunnel
stunnel: update version to 5.59
2021-04-23 11:36:22 +02:00
Josef Schlehofer
c36892a06c Merge pull request #15501 from mkrkn/openwrt-21.02
[21.02] openvpn: update to 2.5.2
2021-04-22 22:11:18 +02:00
Magnus Kroken
22b2389989 openvpn: update to 2.5.2
Fixes two related security vulnerabilities (CVE-2020-15078) which
under very specific circumstances allow tricking a server using delayed
authentication (plugin or management) into returning a PUSH_REPLY before
the AUTH_FAILED message, which can possibly be used to gather
information about a VPN setup. In combination with "--auth-gen-token" or
a user-specific token auth solution it can be possible to get access to
a VPN with an otherwise-invalid account.

OpenVPN 2.5.2 also includes other bug fixes and improvements.

Add CI build test script.

Signed-off-by: Magnus Kroken <mkroken@gmail.com>
(cherry-picked from 6186fe732b)
2021-04-22 20:36:22 +02:00
Florian Eckert
cad3d2012c stunnel: update to 5.59
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 2d56dbfc27)
2021-04-22 17:55:33 +02:00
Florian Eckert
7a7bfa8832 stunnel: update to 5.58
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 389c7f12cb)
2021-04-22 17:55:28 +02:00
Dirk Brenken
cf1ed852b9 banip: update to 0.7.7
* add a "whitelist only" mode, this option allows to restrict Internet
  access from/to a small number of secure websites/IPs, and block access
  from/to the rest of the Internet.

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 515397b009)
2021-04-22 05:51:21 +02:00
Hirokazu MORIKAWA
0d8a914d2e node: Resolve ICU conflict
Resolve conflicts between OpenWrt's ICU package and the ICU shipped with node.js.

https://github.com/openwrt/packages/issues/15437

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-04-21 19:27:00 +03:00
Gerard Ryan
c66290b80c dockerd: Updated to 20.10.6
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-04-21 19:20:00 +03:00
Gerard Ryan
330b8392fa docker: Updated to 20.10.6
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-04-21 19:20:00 +03:00
Gerard Ryan
8100df4242 libnetwork: Updated to 2021-01-26 for docker 20.10.6
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-04-21 19:20:00 +03:00
Gerard Ryan
fc66216c31 containerd: Updated to 1.4.4 for docker 20.10.6
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-04-21 19:20:00 +03:00
Rosen Penev
99cef20e91 Merge pull request #15478 from rs/nextdns-1.32.0-openwrt-21.02
[21.02] nextdns: Update to version 1.32.0
2021-04-20 17:29:49 -07:00
Daniel Danzberger
ed645bce9c python-psycopg2: Add new package
Psycopg is the most popular PostgreSQL adapter for the Python programming language
It's used by the python-sqlalchemy for postgresql

This package was removed by this commit for lacking python3 support:
c37b15e1c4

Version 2.8.6 used in this package now supports pyhton3

Signed-off-by: Daniel Danzberger <daniel@dd-wrt.com>
(cherry picked from commit 7cfb9a04af)
2021-04-20 18:58:05 +02:00
Jan Pavlinec
5231e7d6b2 atlas-sw-probe: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit c65a659e6d)
2021-04-20 18:44:42 +02:00
Jan Pavlinec
5ebbf7fb40 atlas-probe: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit cb30c106c0)
2021-04-20 18:44:37 +02:00
Olivier Poitrey
e4584c311d nextdns: Update to version 1.32.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-04-20 15:08:40 +00:00
Rosen Penev
5ea449c881 Merge pull request #15470 from rs/nextdns-1.12.5-openwrt-21.02
[21.02] nextdns: Update to version 1.12.5
2021-04-19 18:59:33 -07:00
Olivier Poitrey
5aef437506 nextdns: Update to version 1.12.5
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-04-20 01:38:41 +00:00
Rosen Penev
f7fadd934d Merge pull request #15462 from rs/nextdns-1.12.3-openwrt-21.02
[21.02] nextdns: Update to version 1.12.3
2021-04-19 17:47:43 -07:00
Olivier Poitrey
e60797171c nextdns: Update to version 1.12.3
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-04-19 23:23:44 +00:00
Rosen Penev
391784c02a Merge pull request #15458 from rs/nextdns-1.31.3-openwrt-21.02
[21.02] nextdns: Update to version 1.31.3
2021-04-19 16:08:33 -07:00
Olivier Poitrey
222f0838d9 nextdns: Update to version 1.31.3
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-04-19 22:50:29 +00:00
Florian Eckert
4ceeb8fc90 collectd: update PKG_RELEASE
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 1e2ba94064)
2021-04-19 08:35:39 +02:00
Florian Eckert
5b7b76e102 collectd: add percent calculation of bad block to ubi plugin
This patche adds the percent evaluation for the bad blocks.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit b4e24c12a6)
2021-04-19 08:35:29 +02:00
Florian Eckert
646f8dd14e collectd: prepare ubi plugin for percent calculation
This patche change prepares the ubi plugin to add the bad block evaluation in
percent.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 4927b53333)
2021-04-19 08:35:16 +02:00
Florian Eckert
b90c67c8f1 collectd: upate PKG_RELEASE number
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 6e41bf73ba)
2021-04-19 08:34:52 +02:00
Florian Eckert
c45e9cadea collectd: make compile time debug option configurable
Enables the compiler option that collectd is compiled with
debugging support. This is used at development stages to get
more messages from the collectd during development.

This option is default disabled.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit a4f74eb11c)
2021-04-19 08:34:43 +02:00
Florian Eckert
cdd28e1f48 collectd: fix COLLECTD_PLUGINS_SELECTED end of line
This removes the trailing back slash. This is not needed.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 416ba35d50)
2021-04-19 08:34:32 +02:00
Florian Eckert
7304814cfc collectd: fix smart disk detection
On my system the attribute DEVTYPE was not set. The plugin could not
read any data and the function call blocked forever on this function and did
not returned. By removing it, all block devices under `/sys/class/block`
were checked.

Block devices that do not support SMART were not evaluated. The
collected displays the following message.

smart plugin: checking SMART status of /dev/loop4.
smart plugin: unable to open /dev/loop4.

If you do not like this message, you could only enable device in the uci that
does support SMART.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 543a2a970c)
2021-04-19 08:34:21 +02:00
Florian Eckert
83ff0d61ac collectd: enable collectd-mod-smart
Switching on compilation for collectd smart plugin.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 092902a87e)
2021-04-19 08:34:07 +02:00
Florian Eckert
b593b87b78 libatasmart: initial checkin
This library is required by the smart plugin of the collectd.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 87e52cf180)
2021-04-19 08:33:57 +02:00
Dirk Brenken
c6046dd390 adblock: update to 4.1.1
* support the RPZ trigger 'RPZ-CLIENT-IP' to always allow/block certain
  clients based on their IP (currently only supported by bind!)
* avoid promiscuous mode in tcpdump setup for adblock reporting
* speed up dns report preparation
* support dns report mailing (/etc/init.d/adblock report mail)
* fix bind autodetection
* update LuCI-frontend (separate PR)
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit c531b6daea)
2021-04-18 21:12:10 +02:00
Rosen Penev
989d3320c1 squid: update to 4.14
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 682aebbaea)
2021-04-18 20:46:55 +02:00
Josef Schlehofer
8cbb49a12f psmisc: move killall to /usr/libexec and add ALTERNATIVES
Currently, this package can not be installed while using standard path
of busybox, because binary killall wants to be installed on the same
location as busybox.

Collision:
• /usr/bin/killall: busybox (new-file), psmisc (existing-file)

Many of these binaries, which provides alternatives were moved to
folder /usr/libexec like wget, sed, findutils, less.
So I moved killall to /usr/libexec and others leave in touch and added
ALTERNATIVES for it, because preinstall script is no longer necessary.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit d8969e0fd1)
2021-04-18 19:51:06 +02:00
Hannu Nyman
6017b3f018 irqbalance: upgrade to version 1.8.0
Upgrade irqbalance to version 1.8.0

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 6631cfaa61)
2021-04-18 18:28:35 +03:00
Rosen Penev
06970b40c3 Merge pull request #15441 from 1715173329/yq-2102
[openwrt-21.02] yq: Update to 4.7.0
2021-04-17 15:40:38 -07:00
Tianling Shen
aa57054687 yq: Update to 4.7.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(backported from c4d27271ad)
2021-04-18 03:55:19 +08:00
Eneas U de Queiroz
3d22e597f3 atheepmgr: avoid libpciaccess dependency
HAVE_LIBPCIACCESS that is currently passed through MAKE_VARS to disable
building with libpciaccess can't be set through the environment.
Instead, use CONFIG_CON_PCI, which can be passed through the environment
and will disable libpciaccess.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 5283711754)
2021-04-16 18:17:34 -07:00
Josef Schlehofer
1d835ebcdd clamav: add libiconv dependencies when build with NLS
NLS means Native Language Support and when you have it enabled (it is
not default), clamav can not be compiled as it shows following error:

Package clamav is missing dependencies for the following libraries:
libiconv.so.2

Also, it is required that package libiconv-full is compiled first/before
than clamav and then try to compile clamav.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 87be6ffe60)
2021-04-15 17:12:41 +02:00
Luiz Angelo Daros de Luca
c1b697a64b openvpn-easy-rsa: add missing configfile
/etc/profile.d/50-openvpn-easy-rsa.sh was not listed as configfile
and changes were lost during upgrades.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit b0663e2959)
2021-04-14 19:10:34 -07:00
Tomas Lara
487b45f8cc collectd: enable cpufreq for rockchip target
Enable collectd-mod-cpufreq  for rockchip

Signed-off-by: Tomas Lara <tl849670@gmail.com>
(cherry picked from commit 6bd8d29b70)
2021-04-13 19:16:30 +03:00
Luiz Angelo Daros de Luca
2e0c765d8b Merge pull request #15414 from luizluca/21.02/ruby-3.0.1
[21.02] ruby: update to 3.0.1
2021-04-13 13:04:54 -03:00
Jo-Philipp Wich
1a169546f2 bonding: accept list of slaves in uci list notation
Rework the bonding.sh protocol handler to accept slave interface names
encoded in uci list notation. Also replace ifconfig up/down with ip
link calls while we're at it.

Fixes: #11455
Fixes: https://github.com/openwrt/luci/issues/4473
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 57a77386de)
2021-04-13 09:44:33 +02:00
Luiz Angelo Daros de Luca
739faab36c ruby: update to 3.0.1
Fixes two CVEs:

CVE-2021-28965: XML round-trip vulnerability in REXML
CVE-2021-28966: Path traversal in Tempfile on Windows

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2021-04-13 01:40:46 -03:00
Hirokazu MORIKAWA
a43822546e node: bump to v14.16.1
April 2021 Security Releases
- OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT (High) (CVE-2021-3450)
- OpenSSL - NULL pointer deref in signature_algorithms processing (High) (CVE-2021-3449)
- npm upgrade - Update y18n to fix Prototype-Pollution (High) (CVE-2020-7774)

OpenSSL-related vulnerabilities do not affect the OpenWrt package. Because OpenWrt's OpenSSL shared library has been updated.

NODEJS_ICU_SMALL is default

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-04-11 20:29:54 -07:00
Gregory L. Dietsche
9ed6335671 safe-search: prevent duplicate cron job installation
This patch prevents multiple cron jobs from being created to run the
safe-search-maintenance script.

To reproduce this bug, perform the following:
  - Install safe-search
  - Perform an OpenWRT firmware upgrade (choose to preserve user settings)
  - Install safe-search again

Signed-off-by: Gregory L. Dietsche <gregory.dietsche@cuw.edu>
(cherry picked from commit 49535edffd)
2021-04-11 10:04:39 +02:00
Tiago Gaspar
f5d172aede netdata: disable shared memory totals by default
Fix log spam:
daemon.err netdata[2090]: PROCFILE: Cannot open file '/proc/sysvipc/shm'
This is caused by a non existant /proc/sysvipc/shm because of the
CONFIG_PROC_STRIPPED option that is enabled by default in the kernel
generic target config

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 5f65d87bb7)
2021-04-11 09:58:34 +02:00
Stan Grishin
4dd677a89b https-dns-proxy: bugfix: race condition with dnsmasq
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-04-10 22:38:45 -07:00
Stan Grishin
da5df7542f simple-adblock: update to 1.8.7-3
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-04-10 17:08:57 -07:00
Dirk Brenken
e19f158a4b adblock: fix games_tracking source url
Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit ec20e9df96)
2021-04-09 18:46:19 +02:00
Josef Schlehofer
6a437bac7d Merge pull request #15372 from farmergreg/21.02-safe-search
[21.02] safe-search: check for changed IP addresses weekly
2021-04-08 23:30:28 +02:00
Josef Schlehofer
365ce46075 Merge pull request #15371 from farmergreg/21.02-family-dns
[21.02] net/family-dns: Correct Reference to IPKG_INSTROOT
2021-04-08 23:28:05 +02:00
Greg Dietsche
fc63fa7adb family-dns: Correct Reference to IPKG_INSTROOT
IPKG_INSTROOT was misspelled.

Signed-off-by: Gregory L. Dietsche <gregory.dietsche@cuw.edu>
(cherry picked from commit 1569131f95)
2021-04-08 15:55:17 -05:00
Gregory L. Dietsche
1f81b07d86 safe-search: check for changed IP addresses weekly
The current default of hourly is too fast. Some services such as
DuckDuckGo return IPs from a pool based on the user's location instead
of a fixed IP address. This change prevents unnecessary writes to the
flash memory by only updating once per week.

Signed-off-by: Gregory L. Dietsche <gregory.dietsche@cuw.edu>
(cherry picked from commit 7164ccf155)
2021-04-08 15:53:19 -05:00
Rosen Penev
5e764adf30 minisatip: add libdvbcsa support
Unconditionally enable with BUILD_PATENTED.

Simplify configure args.

Add missing PKG_CONFIG_DEPENDS

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3d65773650)
2021-04-07 23:51:43 -07:00
Jo-Philipp Wich
3ba100928a openvpn: fix invoking user up & down commands from hotplug wrapper
This commit adds a number of fixes to the OpenVPN up/down hotplug command
wrapper which currently fails to actually invoke user defined up and down
commands for uci configurations not using external native configurations.

 - Use the `--setenv` to pass the user configured `up` and `down` commands
   as `user_up` and `user_down` environment variables respectively

 - Instead of attempting to scrape the `up` and `down` settings from the
   (possibly generated) native OpenVPN configuration in
   `/etc/hotplug.d/openvpn/01-user`, read them from the respective
   environment variables instead

 - Fix parsing of native configuration values in `get_openvpn_option()`;
   first try to parse a given setting as single quoted value, then as
   double quoted and finally as non-quoted, potentially white-space
   escaped one. This ensures that `up '/bin/foo'` is interpreted as
   `/bin/foo` and not `'/bin/foo'`

Ref: https://forum.openwrt.org/t/openvpn-up-down-configuration-ignored/91126
Supersedes: #15121, #15284
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry-picked from commit 7f065a94bb)
2021-04-07 22:54:36 +02:00
Alexander Egorenkov
00db3d345f openvpn: add OpenVPN option server-poll-timeout
See https://www.mankier.com/8/openvpn#--server-poll-timeout

Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>
(cherry-picked from commit 5789faab67)
2021-04-07 22:54:36 +02:00
Magnus Kroken
f5c82550da openvpn: update to 2.5.1
Set myself as maintainer.

Signed-off-by: Magnus Kroken <mkroken@gmail.com>
(cherry-picked from commit 204c0901b8)
2021-04-07 22:54:36 +02:00
Jan Pavlinec
6241ec3f62 curl: update to version 7.76.0
Fixes CVE-2021-22876 and CVE-2021-22890

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit b971310549)
2021-04-07 14:19:54 +02:00
Rafał Dzięgiel
d9ac276fba libdvbcsa: add new package
Libdvbcsa is a free implementation of the DVB Common Scrambling Algorithm DVB/CSA - with encryption and decryption capabilities.

OpenWrt packages like `tvheadend` and `minisatip` can benefit from it.

Signed-off-by: Rafał Dzięgiel <rafostar.github@gmail.com>
(cherry picked from commit 51c5a8b4bc)
2021-04-07 14:19:41 +02:00
Jan Pavlinec
7f2d84615e python-pytest: update to version 6.2.3
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 4e979ceb6b)
2021-04-07 14:18:59 +02:00
Jan Pavlinec
ed91ba746a knot-resolver: update to version 5.3.1
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 3e3025b191)
2021-04-07 14:18:53 +02:00
Josef Schlehofer
a6cd649edf youtube-dl: update to version 2021.4.7
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 701ded952a)
2021-04-07 14:18:47 +02:00
Josef Schlehofer
f5246aaa29 zeroconf: update to version 0.29.0
Update copyright in Makefile

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 757b0ea647)
2021-04-07 14:18:42 +02:00
Rosen Penev
9e9560362a ksmbd: update to 3.3.8
Major changes are:
  clean-up codes using checkpatch --strict option.
  fix several warning and build failure from linux-next.
  change the minimum supported kernel version to v5.4.
  use xarray for tree connect list.
  fix reviews from lkml.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit fa6f182a21)
2021-04-07 00:49:09 -07:00
Rosen Penev
454280ae49 ksmbd-tools: update to 3.3.8
Major changes are:
  disable symlink by default.
  remove smack inherit leftovers.
  Enable guest access on IPC$ share by default.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c6fa2d5bfa)
2021-04-07 00:48:57 -07:00
Kirill Nikolaev
40d885de8e ksmbd-tools: Add a mDNS TXT record for the ksmbd service
MacOS ignores Bonjour services for which TXT records are not returned. This changes forces umdns service to return a TXT record (`daemon=ksmbd`) for the ksmbd service. The exact content is unimportant and to the best of my knowledge nothing reads the `daemon` tag.

Symptoms of the problem (which are also debugging steps):
* Finder refuses to open the OpenWRT "computer" in the Network list.
* Discovery.app (Bonjour Browser) lists the _ssh._tcp service, but the submenu for it doesn't unfold and no address is shown.
* `dns-sd -L OpenWrt _smb._tcp` doesn't return any address.

Signed-off-by: Kirill Nikolaev <cyril7@gmail.com>
(cherry picked from commit 272b0a5c18)
2021-04-07 00:48:57 -07:00
Sven Roederer
b007b4854c xinetd: honor ${IPKG_INSTROOT} when sourcing /lib/functions.sh
Avoid "file not found"-error when embedding via Imagebuilder.

Signed-off-by: Sven Roederer <devel-sven@geroedel.de>
(cherry picked from commit bdab7e6bfe)
2021-04-07 08:33:45 +02:00
Philip Prindeville
27caf23cc4 strongswan: bump to 5.9.2
Retire weak algorithms like MD5 and 3DES.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit ae3d5aa73e)
2021-04-06 16:05:19 -07:00
Philip Prindeville
11e289b48b strongswan: force PIC on all builds
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit a72780a9c2)
2021-04-06 16:05:19 -07:00
Philip Prindeville
57836bb7d0 strongswan: migrate to swanctl configs
Derived from the ipsec initd script, with the following changes:

(1) various code improvements, corrections (get rid of left/right
    updown scripts, since there's only one), etc;
(2) add reauth and fragmentation parameters;
(3) add x.509 certificate-based authentication;

and other minor changes.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit f9d91f1f47)
2021-04-06 16:05:19 -07:00
Philip Prindeville
a6eaab4553 strongswan: remove synthesized ipsec conf files
If you shutdown ipsec service, and it doesn't clean up
/var/ipsec/ipsec.conf, then when you start swanctl service it
might see an incompatible file on startup.  Remedy is to
remove unneeded files when shutting down the service.  They
can always be regenerated when the service starts again.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit baa38a1420)
2021-04-06 16:05:19 -07:00
Philip Prindeville
c5335e865d strongswan: move ipsec conf files to subpackage
These config files are only used by the ipsec interface to charon,
and shouldn't be part of the base package.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit e626255b37)
2021-04-06 16:05:19 -07:00
Philip Prindeville
56feabdcdc strongswan: make the include's in the .conf files persistent
Having scripts diddle user written config files seems potentially
dangerous.  Plus there's really no downside to including some
empty files.  Best to just make the includes be permanent.

Additional feature suggested by Luiz: if a -opkg version of the
config file was created unnecessarily, remove it as part of the
upgrade process since changes won't be happening to that file
as an artifact of the service starting.  The include lines are
now permanent, which means that (1) additional configuration
synthesized by UCI won't be anywhere that opkg (or sysupgrade,
for that matter) cares about since it won't be persistent, and
(2) if changes are being made, then they're being done by a
person with an editor and they really should be distinguished.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit 643df01275)
2021-04-06 16:05:19 -07:00
Philip Prindeville
2983a7f9ef strongswan: change maintainers
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit 0bd4410e30)
2021-04-06 16:05:19 -07:00
Philip Prindeville
cc8a4252b1 strongswan: fix local_gateway discovery
This has been observed by myself and @luizluca: ip route get is
appending uid0 to the output, as seen from:

root@OpenWrt2:~# ip route get 1.1.1.1
1.1.1.1 via 174.27.160.1 dev eth3 src 174.27.182.184 uid 0
    cache
root@OpenWrt2:~#

so the fix is an anchored match, discarding all else. Also, using
ip -o means never having to do multiline matches...

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit ec72d3a9e4)
2021-04-06 16:05:19 -07:00
David Bauer
d9f1bc3754 mtd-rw: fix build failure with kernel 5.10
When building mtd-rw for a target based on Kernel 5.10 which has
CONFIG_MTD disabled the build fails with

ERROR: "put_mtd_device" [../mtd-rw.ko] undefined!
ERROR: "get_mtd_device" [../mtd-rw.ko] undefined!

Omit building the package for such a target.

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit c6b3d94929)
2021-04-06 16:02:22 -07:00
Rosen Penev
3a3b7c6eee clamav: update to 0.103.1
Convert to using CMake in order to speed up compilation and to fix
compilation under glibc.

Add extra dependencies since they're now needed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7cd687cb7e)
2021-04-06 16:01:00 -07:00
Rosen Penev
e1b21ddda2 python3-libsemanage: update to 3.2
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit acb72e7452)
2021-04-06 15:59:19 -07:00
Rosen Penev
39023fe0a2 setools: update to 4.4.0
Remove no longer needed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 39bce0e719)
2021-04-06 15:59:19 -07:00
Ondřej Caletka
aefb3927ce jool: Update to 4.1.5
Compile and run tested on: mvebu (Turris Omnia)

Signed-off-by: Ondřej Caletka <ondrej@caletka.cz>
(cherry picked from commit 0c044284b7)
2021-04-06 14:51:29 -07:00
Sven Roederer
e9a109cc8c nut: fix typo in nutshutdown script
Even it's only cosmetic and should not affect the function of regular system,
fix the name of the IPKG_INSTROOT variable.
Typo was added long ago with 8400c9a6ec.

Signed-off-by: Sven Roederer <devel-sven@geroedel.de>
(cherry picked from commit f25f49a8b7)
2021-04-06 14:51:29 -07:00
Karl Palsson
2fcc5d5c9f mosquitto: bump to 2.0.10
This is a security fix, affecting 2.0.0 through to 2.0.9.  Mosquitto instances
could be remotely DoS'd by authenticated clients.

Release notes at: https://github.com/eclipse/mosquitto/blob/v2.0.10/ChangeLog.txt
CVE number has not yet been assigned.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-04-06 14:14:57 +00:00
Christian Lachner
ab26cb98e1 haproxy: Update HAProxy to v2.2.13
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2021-04-06 12:56:14 +03:00
Gerard Ryan
d382ce0bc7 cache-domains: Fixed host files directory
* Hid unnecessary output

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-04-05 17:15:36 -07:00
Rosen Penev
58d5865471 Merge pull request #15331 from 1715173329/xray-2102
[openwrt-21.02] xray-core: Update to 1.4.2
2021-04-03 19:07:23 -07:00
Dirk Brenken
326661db31 banip: bugfix 0.7.6-2
* fix housekeeping of external list sources

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 86a20c7955)
2021-04-03 19:20:09 +02:00
Tianling Shen
5dd5cabd74 xray-core: Update to 1.4.2
Updated geo datas to latest version.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(backported from 781c70077b)
2021-04-02 17:29:18 +08:00
Tianling Shen
5543e0925a xray-core: init: add browser dialer support
Since v1.4.1, Xray has introduced a new feature to transfer data via
browsers, which can disguise itself as a normal browser to cheat
network censorship.

For more details, see https://github.com/XTLS/Xray-core/pull/421.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(backported from 736667ce6e)
2021-04-02 17:29:03 +08:00
Stan Grishin
d13b4c53f6 simple-adblock: jsonOps-related bugfixes
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-04-01 23:03:38 -10:00
Tianling Shen
fb402a71e0 xray-core: Update to 1.4.1
Updated geodata to latest version.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(backported from ee9868cb20)
2021-03-31 17:37:39 -10:00
Tianling Shen
ee38781149 yq: Update to 4.6.3
- Re-assigned myself as the maintainer
- Used $(AUTORELEASE) for PKG_RELEASE

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(backported from 82ebe3e49a)
2021-03-31 17:36:51 -10:00
Martin Matějek
c07c27ce7f python3-pyroute2: update to version 0.5.16
Signed-off-by: Martin Matějek <martin.matejek@gmx.com>
(cherry picked from commit df4b1ae24e)
2021-03-30 21:47:40 +02:00
Dirk Brenken
28024c0ced banip: update to 0.7.6
* rework the central iptables function to significantly
  reduce the code complexity and the overall number of iptables calls
* check early and only once in the chain for ctstate NEW and
  return otherwise (thanks @ldir-EDB0)
* made the whitelist ordering within the chain more flexible

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1235acdde6)
2021-03-29 17:54:02 +02:00
Josef Schlehofer
5dec63279c hwdata: update to version 0.345
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5e30a07908)
2021-03-29 00:24:10 +02:00
Jan Pavlinec
7bd8b26e1e python-zipp: update to version 3.4.1
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 7f85073979)
2021-03-29 00:23:44 +02:00
Jan Pavlinec
d3facdda9a subversion: update to 1.14.1
Fixes CVE-2020-17525

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 0dd5354abc)
2021-03-29 00:23:34 +02:00
Jan Pavlinec
74b0a3de7e zstd: update to version 1.4.9
Fixes CVE-2021-24032

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit ebc4939dd2)
2021-03-29 00:23:09 +02:00
Jan Pavlinec
1f47b58bbe git: update to version 2.30.2
Fixes CVE-2021-21300

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit a4f058ec5c)
2021-03-29 00:23:00 +02:00
Paul Spooren
bb3eb4d98c CI: use new openwrt Docker username
We now own `openwrtorg` and `openwrt`, where the latter replaces the
former. Slowly migrate over.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit b164a3aa32)
2021-03-29 00:22:08 +02:00
Rosen Penev
7e7adfceef reptyr: add mips64el to the DEPENDS list
MIPS is completely unsupported.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 03515d00cd)
2021-03-29 00:21:49 +02:00
Rosen Penev
5e1909711a bind: update to 9.17.11
Backport upstream OpenSSL deprecated API patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit dd64cb713b)
2021-03-29 00:21:38 +02:00
Josef Schlehofer
4322399166 netdata: update to version 1.29.3
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5074fbbfdc)
2021-03-29 00:21:31 +02:00
Josef Schlehofer
8870abe052 sshpass: update to version 1.09
Changelog [1]:
Version 1.09
	* Explicitly set the controlling TTY

Version 1.08
	* Report when IP key has changed
	* Scrub the environment variable for -e

Version 1.07
	* Pass signals that should terminate to ssh
	* Fix race around signal handling
	* Report IPC errors to stderr
	* Report if can't open -f password file

[1] https://sourceforge.net/p/sshpass/code/76/tree/trunk/ChangeLog

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5799d0b1ee)
2021-03-29 00:21:25 +02:00
Josef Schlehofer
ffdfd13550 nnn: update to version 3.6
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ad116f29ce)
2021-03-29 00:21:17 +02:00
Josef Schlehofer
ec9563fa21 syslog-ng: update to version 3.31.2
Bump config file

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 3d817e968e)
2021-03-29 00:21:12 +02:00
Jan Pavlinec
7e33ed6ec0 gitlab-runner: update to version 13.10.0
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit d7e2b608e6)
2021-03-29 00:15:44 +02:00
Rosen Penev
23c8b3a689 gitlab-runner: update to 13.9.0
Remove no MIPS depends as it supports MIPS now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1329b9fe2e)
2021-03-29 00:15:38 +02:00
Jan Pavlinec
b69cba5a62 gnutls: update to version 3.7.1
Fixes
CVE-2021-20231
CVE-2021-20232

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 323461a1f0)
2021-03-29 00:14:54 +02:00
Philip Prindeville
04985c7984 libmariadb: add dependency on libcurl
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit 5b2d35a8d0)
2021-03-29 00:13:58 +02:00
Nicholas Smith
fbc11c23f4 libqmi: bump to 1.28.2
Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit 570ff69ec6)
2021-03-29 00:09:16 +02:00
Nicholas Smith
af73bbb6a2 libqrtr-glib: add libqrtr-glib
Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit cfe24305de)
2021-03-29 00:08:54 +02:00
Nicholas Smith
a6d7570c6d libqmi: bump to 1.28.0
Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit c9709a3c82)
2021-03-29 00:08:48 +02:00
Nicholas Smith
2aca8619f5 modemmanager: bump to 1.16.2
Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit 02d8bbcfe0)
2021-03-29 00:08:00 +02:00
Nicholas Smith
1ef858568d modemmanager: bump to version 1.16.0
Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit 54a9b58ffd)
2021-03-29 00:07:51 +02:00
Dirk Brenken
76444a4740 banip: update to 0.7.5-4
* fix another IPv4/IPv6 related iptables chain creation problem
* fix counter during ipset creation
* fix regex for debug counters
* fix ipset housekeeping for local sources

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit fb4bfd259d)
2021-03-26 22:13:21 +01:00
Stan Grishin
de20008a8f https-dns-proxy: bugfix: correct PROCD firewall object
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-25 16:46:06 -07:00
Dirk Brenken
8cd2870e85 adblock: update 4.1.0-3
* add a restrictive "jail mode only" variant, just point your
  jail directory to your primary dns directory
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit df9ee1388e)
2021-03-23 11:41:17 +01:00
Rosen Penev
6b90ecde11 Merge pull request #15220 from stangri/21.02-https-dns-proxy
[21.02] https-dns-proxy: support for additional Force DNS ports
2021-03-22 11:57:03 -07:00
Rosen Penev
e647b52672 Merge pull request #15227 from cotequeiroz/pic_quote-21.02
[21.02] Cherry-picks from PRs dealing with $(FPIC) quoting
2021-03-22 11:56:33 -07:00
Eneas U de Queiroz
d6942bd8a4 nss: fix compilation with QUILT
Commit 657574f45 disabled building the host nsinstall program when using
QUILT.  However, the host nsinstall is needed to compile the package,
breaking compilation with QUILT.

Move the native compile to Build/Configure, which will not be called for
prepare, refresh, or update targets, but will be called before
Build/Compile.

nss does not have a configure script, so Build/Configure/Default is not
being called.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit fbed6751b0)
2021-03-22 13:23:13 -03:00
Eneas U de Queiroz
311ab91528 nss: quote $(FPIC), as it may have multiple flags
FPIC may be defined with more than one flag.  In that case, it becomes
necessary to use it inside QUOTES in a shell context.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit c5f91a2a56)
2021-03-22 13:23:12 -03:00
Philip Prindeville
17f63e9501 treewide: fix places where $(FPIC) is unquoted
Fixes part of issue #14921.

When $(FPIC) gets added to TARGET_CFLAGS (for instance), we can
count on $(TARGET_CFLAGS) in turn being quoted when it gets
expanded.  But there are a few places where $(FPIC) gets
expanded directly into environment variables passed on the
command line, such as when setting lt_cv_* variables as in this
case.

It's wrong to assume that the expansion of $(FPIC) won't require
quoting (such as it containing spaces) if it has multiple compiler
flags.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit 0d5c6769f1)
2021-03-22 13:23:10 -03:00
Florian Eckert
0e293fa42a Merge pull request #15158 from TDT-AG/pr/20210218-openwrt-21.02-watchcat
watchcat: update to support procd
2021-03-22 08:48:04 +01:00
Stan Grishin
17637d985c https-dns-proxy: support for additional Force DNS ports
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-22 07:29:01 +00:00
Erwan MAS
2b0311b5fe tinc: new maintainer
Signed-off-by: Erwan MAS <erwan@mas.nom.fr>
2021-03-20 23:19:42 -07:00
Erwan MAS
9841aaf290 tinc: fix missing HASH
Signed-off-by: Erwan MAS <erwan@mas.nom.fr>
2021-03-20 23:19:42 -07:00
Erwan MAS
7fdeffbfb4 tinc: Bump to version 1.1 commit 3ee0d5dd
Signed-off-by: Erwan MAS <erwan@mas.nom.fr>
2021-03-20 23:19:42 -07:00
Rosen Penev
c64394460a Merge pull request #15164 from gladiac1337/haproxy-2.2.11-21.02
[openwrt-21.02] haproxy: Update HAProxy to v2.2.11
2021-03-19 15:51:43 -07:00
Dirk Brenken
571744a332 banip: update 0.7.5-3
* fix iptables/chain creation in setups without IPv6 support

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 80466dd045)
2021-03-19 22:24:01 +01:00
Christian Lachner
9e3d1607cb haproxy: Update HAProxy to v2.2.11
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2021-03-19 18:34:47 +01:00
Tianling Shen
53a666e385 tmate: add new package
Tmate is a fork of tmux. It provides an instant pairing solution.
For more details, see https://tmate.io.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ccfe1bfa50)
2021-03-18 22:19:34 -10:00
Tianling Shen
7780dec333 msgpack-c: add new package
This is needed by tmate.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit cfc965b107)
2021-03-18 22:19:34 -10:00
Nicholas Smith
9c94561ca0 watchcat: update to support procd
Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit 399279b363)
2021-03-18 12:43:32 +01:00
Daniel Golle
8210edd108 auc: bump to version 0.1.6
Fixes running on release branches.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 004abfec75)
2021-03-18 01:40:48 +00:00
Daniel Golle
8b8b70ef55 auc: sync with development branch
* update to new server API
 * include version_code in request
 * include versions of selected packages in request
 * add SHA256 verification via busybox sha256sum
 * sort attributes in policies alphabetically
 * move all API-specific string constants to precompiler macros
 * set correct MIME type for JSON post request (application/json)
 * output string error message if something goes wrong
 * auto-generate version string

(cherry squashed from commit 85ba80592b,
commit 985b0f8f63 and
commit fb26b424e8)
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-17 23:58:15 +00:00
Jan Pavlinec
1a9539166d tor: update to version 0.4.5.7
Fixes CVE-2021-28089 and CVE-2021-28090

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-03-17 19:56:04 +02:00
Florian Eckert
b544e0aa58 mwan3: add connecting and disconnecting event to mwan3track
If the interface goes into failure state (is disconnecting)
then with this change one hotplug.d event is generated.

The same is true for the recovery state (is connecting), when the interface
comes back from a failure state.

In both cases, a hotplug.d event for the iface is triggered. Once
with the $ACTION=disconnecting and once for the $ACTION=connecting.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 5348732b98)
2021-03-17 14:17:23 +01:00
Dirk Brenken
3802d70e6b banip: update to 0.7.5-2
* refine the new dns resolving process
* add a caching mechanism for the resolved IPs, the detached name
  lookup takes place only during 'restart' or 'reload' action, 'start'
  and 'refresh' actions are using an auto-generated backup instead.
* update the readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 909a87c2f5)
2021-03-15 22:32:56 +01:00
Karl Palsson
1c5c3a4108 lang/lua-libmodbus: bump to 0.7 release
Includes fixes for OpenWrt's Lnum patched lua.
Release notes at: https://github.com/etactica/lua-libmodbus/blob/v0.7/changelog

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-03-15 16:09:29 +00:00
Karl Palsson
be12ef3bc2 net/mosquitto: Update to 2.0.9
This is a bugfix release, with minor security fixes for outgoing bridge
connections and the client library.

Full details here: https://mosquitto.org/blog/2021/03/version-2-0-9-released/

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-03-15 16:09:04 +00:00
Rosen Penev
b508c6fd16 gerbera: update to 1.7.0
Switch to AUTORELEASE for simplicity.

Switch to building with ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit be54cf98eb)
2021-03-14 16:54:15 -07:00
Rosen Penev
fba5673cb9 libnpupnp: update to 4.1.1
Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 12044355b0)
2021-03-14 16:54:15 -07:00
Rosen Penev
7bc83e576f pugixml: update to 1.11.4
Switch to AUTORELEASE for simplicity.

Switch to ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2c8c25d6f8)
2021-03-14 16:54:15 -07:00
Rosen Penev
568642ef96 taglib: update to 1.12-beta-2
Switch to AUTORELEASE for simplicity.

Switch to building with ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c94614841f)
2021-03-14 16:54:15 -07:00
Rosen Penev
bc18279ac0 libmatroska: update to 1.6.3
Switch to AUTORELEASE for simplicity.

Switch to ninja for faster compilation.

Remove LTO as it's broken on this package.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3074960bb6)
2021-03-14 16:54:15 -07:00
Rosen Penev
beb319fad7 libebml: update to 1.4.2
Switch to AUTORELEASE for simplicity.

Switch to ninja for faster compilation.

Remove LTO as it's broken on this package.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7888403545)
2021-03-14 16:54:15 -07:00
Rosen Penev
14030e690a Merge pull request #15123 from 1715173329/21.02-xray-update
[openwrt-21.02] xray-core: Update to 1.4.0
2021-03-14 16:34:54 -07:00
Tianling Shen
0e2a545f1d xray-core: Update to 1.4.0
- Re-assigned myself as the maintainer
- Updated geodata to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(backported from a28580a530)
2021-03-15 00:16:37 +08:00
Hannu Nyman
221f81d2c3 Merge pull request #15085 from cotequeiroz/pigeonhole-21.02
[21.02] pigeonhole: cherry-pick bumps to 0.5.14 from master
2021-03-14 11:12:39 +02:00
Dirk Brenken
ab8304e9d0 banip: bump to 0.7.5
* black- and whitelist now supporting domain names as well - the
corresponding IPs (IPv4 & IPv6) will be resolved in a detached
background process and added to the IPsets

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 804249a571)
2021-03-14 07:03:00 +01:00
Rosen Penev
55f6734c6c Merge pull request #15113 from G-M0N3Y-2503/docker-20.10.5
docker,dockerd: Updated to 20.10.5
2021-03-13 06:10:47 -08:00
Gerard Ryan
9893ce9b43 docker,dockerd: Updated to 20.10.5
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-03-13 22:55:25 +10:00
Christian Lachner
3ab01827b1 haproxy: Update HAProxy to v2.2.10
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2021-03-13 14:43:34 +02:00
Rosen Penev
441bfb3299 ksmbd-tools: update to 3.3.7
Major change are:

ksmbd.control -s terminate ksmbd.mountd as well as kernel server.
Update configuration.txt and README.
Turn off smb2 leases by default again.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7a1a8f3659)
2021-03-12 18:18:14 -08:00
Rosen Penev
189d4aeb7d ksmbd: update to 3.3.7
Major change are:

Fix an issue that directories appear as files when using windows
backup.
Fix xfstests generic/241 failure on life test.
Update ksmbd shutdown and debug print on/off using ksmbd.control in
cifsd.rst.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 851b9b252f)
2021-03-12 18:18:14 -08:00
Rosen Penev
07da99cb83 ksmbd-tools: update to 3.3.6
Major changes are:

Add missing g_rwlock_init() for rpc_samr and rpc_lsaprc.
Fix potential potential null pointer dereferencing error.
Fix memleak.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d95edf16ef)
2021-03-12 13:23:25 -08:00
Martin Blumenstingl
e50a8fb191 ksmbd-tools: update to 3.3.5
Major changes for version 3.3.5 are:
- Rename "streams" parameter to "vfs objects = streams_xattr".
- Enable smb2 leases by default.
- Ignore ksmbd.subauth creation failure.
- Fix bugs that related to guest ok = yes.

Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>
(cherry picked from commit 58f91090f5)
2021-03-12 13:23:25 -08:00
Rosen Penev
2d2e6fe19e ksmbd: update to 3.3.6
Major changes are:

Fix kernel oops from fuse+ntfs driver.
Fix the issue of change the directory to the file using Nautilus
client.
Fix ksmbd build break with the latest linux-5.12-rc1.
Fix potential memleak and use after free.
Fix use after free from KASAN(racy issue)

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8e3a4adea3)
2021-03-12 13:23:25 -08:00
Martin Blumenstingl
b516dbdba6 ksmbd: update to 3.3.5
Major changes for version 3.3.5 are:
- Add support for version 4 dos attribute structure of samba.
- Implement maximal allowed desired access.
- Fix several error handling.
- Fix a few smbtorture failures.

Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>
(cherry picked from commit 71aef26ecb)
2021-03-12 13:23:25 -08:00
Paul Spooren
037597d1e5 syncthing: update to 1.14.0
https://github.com/syncthing/syncthing/releases/tag/v1.14.0

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 2ce9215213)
2021-03-11 12:13:11 -10:00
Eneas U de Queiroz
cbd5c9cb92 pigeonhole: bump to 0.5.14
ChangeLog:
 - IMAP FILTER command: cmd-filter-sieve - Do not allow NIL as script
   name argument.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit e40776d264)
2021-03-10 21:21:29 -03:00
Rosen Penev
6d18aa43d0 pigeonhole: update to 0.5.13
Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3eb83963cf)
2021-03-10 21:21:29 -03:00
Dirk Brenken
86a896757c adblock: small update
* add adguard_tracking source (list with cname trackers)
* optimize/sort output of active sources in status
* optimize log output in EMails

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit f91e5cc666)
2021-03-10 14:44:40 +01:00
Michael Heimpold
d576b0eefc Merge pull request #15064 from mhei/21.02-php8
[21.02] php8: backport fixes and update from master
2021-03-10 07:21:25 +01:00
Michael Heimpold
1eddcdefc9 Merge pull request #15062 from mhei/21.02-php7-update
[21.02] php7: update to 7.4.16
2021-03-08 23:10:57 +01:00
Rosen Penev
63280ad8de Merge pull request #15053 from stangri/21.02-vpn-policy-routing
[21.02] vpn-policy-routing: better processing of custom user files
2021-03-08 12:26:29 -08:00
Michael Heimpold
f4a36a0c60 php8: update to 8.0.3
Also update opcache compile fix patch.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit e819f630a2)
2021-03-08 21:26:22 +01:00
Eneas U de Queiroz
61bd6aa423 php8: fix pecl build with QUILT
This is d4979cff0 ported to php8.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit db3389edc2)
2021-03-08 21:26:17 +01:00
Eneas U de Queiroz
10d3f10a81 php8: fix build with QUILT
This is d4979cff0 ported to php8.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 8c6d7dc37c)
2021-03-08 21:26:00 +01:00
Rosen Penev
4a13111f9f Merge pull request #15051 from stangri/21.02-simple-adblock
[21.02] simple-adblock: update to 1.8.5-1
2021-03-08 12:25:23 -08:00
Stan Grishin
e0a9c7fbcf vpn-policy-routing: better processing of custom user files
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-08 10:34:50 +00:00
Stan Grishin
94b4cce292 simple-adblock: update to 1.8.5-1
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-08 10:25:23 +00:00
Michael Heimpold
d5e5d544bb php7: update to 7.4.16
Also refresh patch.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 87e852fc71)
2021-03-07 22:10:11 +01:00
Dirk Neukirchen
1831941e73 i2pd: fix startup
i2pd reports:
missing/unreadable config file: /etc/i2pd/i2pd.conf

Signed-off-by: Dirk Neukirchen <plntyk.lede@plntyk.name>
(cherry picked from commit 4f42a7a95a)
2021-03-07 02:17:23 +01:00
Jan Pavlinec
7bc80b5956 python-aiohttp: update to version 3.7.4
Note:
Fixes CVE-2021-21330
Add new required dependecy python3-typing-extensions

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit c99a19f614)
2021-03-07 02:16:50 +01:00
Jan Pavlinec
dd3747ea18 python-typing-extensions: add new package
Note:
Dependency for python3-aiohttp

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 034cba33c6)
2021-03-07 02:16:39 +01:00
Michael Heimpold
ca89f03da2 hs20: fix linking with full language support enabled
After d18692c, we need to include nls.mk to setup correct
environment variables so that linking succeeds.

Reported-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 3b177a9d60)
2021-03-07 02:16:29 +01:00
Michael Heimpold
e95688fa82 aria2: fix linking with full language support enabled
After d18692c, we need to include nls.mk to setup correct
environment variables so that linking succeeds.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit ab52802e38)
2021-03-07 02:15:47 +01:00
Rosen Penev
3ec544b7d2 reptyr: do not build on mips64
mips of any kind is not supported.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit a30518f99e)
2021-03-07 02:12:16 +01:00
Hannu Nyman
801d4cae62 nano: update to 5.6.1
Update nano editor to version 5.6.1

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 0f4138db0b)
2021-03-06 10:28:39 +02:00
Rosen Penev
7a5d66cbb7 Merge pull request #14993 from 1715173329/2102-newyq
[openwrt-21.02] yq: Update to 4.6.1
2021-03-02 19:53:33 -08:00
Rosen Penev
d1519f07f8 Merge pull request #14995 from 1715173329/2102-xr-go1.16
[openwrt-21.02] xray-core: Update to 1.3.1
2021-03-02 19:51:50 -08:00
Josef Schlehofer
ac8fe0eb07 Merge pull request #14908 from jefferyto/python-3.9.2-openwrt-21.02
[openwrt-21.02] python3: Update to 3.9.2, refresh patches
2021-03-03 00:09:13 +01:00
Jeffery To
b35fb7e8f9 python3: Update to 3.9.2, refresh patches
Includes fixes for:
* CVE-2021-3177 - ctypes: Buffer overflow in PyCArg_repr
* CVE-2021-23336 - urllib parse_qsl(): Web cache poisoning - semicolon
  as a query args separator

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 6d9005d5ac)
2021-03-02 23:14:19 +08:00
Tianling Shen
4270ac1e0b xray-core: Update to 1.3.1
- updated geodata to latest version
- updated project url

Fixes: #14972

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(backported from 264ce0d0ee)
2021-03-02 23:13:01 +08:00
Tianling Shen
8b9927ec8d yq: Update to 4.6.1
Fixed performance issue.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(backported from 32515ced93)
2021-03-02 21:13:44 +08:00
Rosen Penev
d5c323ee68 Merge pull request #14990 from G-M0N3Y-2503/dockerd-20.10.4
docker,dockerd,runc: Docker 20.10.4 Update
2021-03-02 03:19:19 -08:00
Rosen Penev
a03345d9b7 Merge pull request #14989 from stangri/21.02-vpn-policy-routing
[21.02] vpn-policy-routing: update to 0.3.2-18
2021-03-02 01:57:02 -08:00
Jan Pavlinec
a1a7a8615c knot-resolver: update to version 5.3.0
Changes:
- remove arch limit
- add libnghttpd2 dependency

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 9103076ec7)
2021-03-02 10:34:24 +01:00
Gerard Ryan
a84a660a0e docker,dockerd: Updated to 20.10.4
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-03-02 18:35:39 +10:00
Gerard Ryan
a4a36c807a runc: Updated to 1.0.0-rc93
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-03-02 18:35:38 +10:00
Rosen Penev
f0682c1d30 Merge pull request #14976 from G-M0N3Y-2503/dockerd-ipv6-config-bridge
dockerd: ipv6 bridge config
2021-03-01 17:19:53 -08:00
Paul Spooren
f58f95e3aa syncthing: update to 1.13.1
Also start using $(AUTORELEASE)

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit dda59fedcc)
2021-03-01 11:41:33 -10:00
Paul Spooren
53fa877e8e CI: fix handling of release branches
The "changed package" logic triggers all packages changed since
`origin/master` while for releases branches all changes since e.g.
`origin/openwrt-21.02` should be considered.

First figure out the active branch, then find changed packages.

Signed-off-by: Paul Spooren <mail@aparcar.org>
2021-03-01 11:41:33 -10:00
Stan Grishin
dd27fb27f3 vpn-policy-routing: update to 0.3.2-18
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-01 21:38:57 +00:00
Florian Eckert
0042f2dfa7 mwan3: disable DNS lookups for ping checks
By default, ping does a reverse DNS of the IP that you are pinging.
When you have a network issue (such as when a link has just gone down
and you haven't yet marked it down), this lookup can cause failures on
tests for links that are still good.

This option only works for iputils ping.
For busybox the option is not evaluated, but it is accepted without
throwing an error.

Fixes: #14968
Fixes: #14924

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Suggested-by: David Lang <david@lang.hm>
(cherry picked from commit 7cfb282432)
2021-03-01 12:44:22 +01:00
Gerard Ryan
d2a0d5b6fd dockerd: package release bump
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-03-01 18:11:06 +10:00
Gerard Ryan
68da5fea94 dockerd: Added options to setup a dualstack default bridge
* Added IPv6 Support

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-03-01 18:11:06 +10:00
Ilya Lipnitskiy
b9ff010dca CI: enhance package detection logic
Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
(cherry picked from commit a2b08b5cbf)
2021-03-01 08:47:15 +01:00
Rosen Penev
5b0c55ecb4 Merge pull request #14946 from G-M0N3Y-2503/docker-20.10.3
docker,dockerd: Updated to 20.10.3
2021-02-28 15:03:06 -08:00
Rosen Penev
4c6acdb752 Merge pull request #14963 from EricLuehrsen/unbound_1131_2102
[openwrt-21.02] unbound: update to 1.13.1
2021-02-28 15:02:22 -08:00
Eric Luehrsen
f75ca7f5e0 unbound: update to 1.13.1
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2021-02-28 16:21:41 -05:00
Philip Prindeville
d64ce32a34 safe-search: fix typos in package scripting
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit 8d09fc0cfb)
2021-02-28 13:11:00 +01:00
Bernhard Voelker
17f2ef9a0e utils/findutils: update to 4.8.0
* utils/findutils/Makefile (PKG_VERSION): Update to latest.
(PKG_RELEASE): Reset to 1.
(PKG_HASH): Update.

Signed-off-by: Bernhard Voelker <mail@bernhard-voelker.de>
(cherry picked from commit 3614a520d2)
2021-02-28 13:10:55 +01:00
David Bauer
ac11726f14 static-neighbor-reports: add missing Lua dependency
Add a missing dependency on Lua. Otherwise the script installing the
neighbor report can't be executed in case Lua is not installed on the
system.

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 83d572af98)
2021-02-28 13:10:45 +01:00
Rosen Penev
3764821fee vim: fix compile with BUILD_NLS
Avoids having to use msgfmt, which happens to be broken with gettext-full.

msgfmt is used for the desktop gvim application, which is not used here.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d5ddc98cb6)
2021-02-28 13:10:21 +01:00
Gerard Ryan
fbb4eb90d1 docker,dockerd: Updated to 20.10.3
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-02-28 21:04:44 +10:00
Gerard Ryan
71ca7dd08a docker,dockerd: Added git-short-commit to verify short commit
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-02-28 21:04:16 +10:00
Rosen Penev
549db8ee27 Merge pull request #14937 from nxhack/2102_add_node-yarn
[21.02] node-yarn: add new package - for building adguardhome
2021-02-28 01:30:07 -08:00
Rosen Penev
5581f5ec48 Merge pull request #14935 from G-M0N3Y-2503/dockerd-use-host-dns
dockerd: Added option to configrue docker to use host Dnsmasq for DNS
2021-02-28 01:29:22 -08:00
Gerard Ryan
59373d5e4d dockerd: Package release bump
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-02-28 10:25:45 +10:00
Gerard Ryan
f726fcfe9e dockerd: set docker zone chain defaults to ACCEPT
* Since the docker0 is a private network by default we can be
  more accepting like the LAN is by default

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-02-28 10:23:41 +10:00
Gerard Ryan
d758e89fa5 dockerd: Added option to set dns servers
* The default server is the default switch so that
  queries will go through the hosts dnsmasq by default

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-02-28 10:23:41 +10:00
Rosen Penev
112e7f5e7d Merge pull request #14839 from G-M0N3Y-2503/dockerd-maintainence-backport
dockerd: misc maintainence
2021-02-27 15:46:10 -08:00
Rosen Penev
46b84dc335 Merge pull request #14920 from luizluca/21.02/sane-backends-1.0.32
[21.02] sane backends 1.0.32
2021-02-27 01:35:06 -08:00
Dirk Brenken
77efbe8ac7 adblock: update 4.1.0
* major source changes:
  * split oisd.nl in basic and full variant
  * add swedish regional list
  * made archive categories for shallalist and utcapitole selectable
    via LuCI
  * made all list variants of energized and stevenblack selectable
    via LuCI
* removed dns filereset mode

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 215ffbe357)
2021-02-27 06:46:32 +01:00
Dirk Brenken
c094b09da2 travelmate: update to 2.0.3
* refine the wifi reconfigure logic

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 2b476ffd38)
2021-02-27 06:43:57 +01:00
Dirk Brenken
d15c358b82 Merge pull request #14919 from stangri/21.02-vpn-policy-routing
[21.02] vpn-policy-routing: bugfix: netflix user file missing redirect
2021-02-27 06:22:11 +01:00
Gerard Ryan
1c848f1f2c dockerd: Package release bump
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-02-27 13:39:57 +10:00
Gerard Ryan
0c82aad0be dockerd: Added iptables wait to ensure rules are added
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-02-27 13:39:31 +10:00
Gerard Ryan
8bc1ac1589 dockerd: Made blocked_interfaces ip rule REJECT
* Changed from DROP to REJECT to be consistant with other firewall rules

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-02-27 13:39:31 +10:00
Gerard Ryan
348bcb6e68 dockerd: made registry_mirrors and hosts omittable
* Moved logic out of config writing
* Made default config only specify OpenWrt dictated defaults
  Otherwise, docker defaults can be assumed

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-02-27 13:39:31 +10:00
Gerard Ryan
f12f31cd10 dockerd: Normalized config quotation marks
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-02-27 13:39:31 +10:00
Stan Grishin
1963605aed vpn-policy-routing: bugfix: netflix user file missing redirect
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-02-26 22:03:54 +00:00
Rosen Penev
6f2829de2c sane-backends: update to 1.0.32
Dropped patches:
-102-pixma_Restore_old_behaviour_in_case_XML_support_is_missing.patch (merged)
-101-fix_uclibc_std_rand.patch std::round was unavailable because of a wrong configure
 var from the uClibc days. Fixed upstream with 1647790ae6202bd70b199e2aa44f8eb43e8d3af1

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit bf1a138f92)
(cherry picked from commit 49e75e8105)
2021-02-26 16:40:21 -03:00
Rosen Penev
fb40eb45a6 libv4l: fix glibc compilation
There was a typo in the linker flags.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b945b0790f)
2021-02-26 16:40:21 -03:00
Eneas U de Queiroz
8d8d71b87d php7: fix build with QUILT
When building with QUILT, unlike the regular build, Build/Prepare does
not apply the patches.  So when buildconf is called with QUILT on, at
the end of Build/Prepare, it will not have the patched sources, and
build will fail.

To fix the problem, run buildconf in Build/Prepare only when QUILT is
off, and do it in Build/Configure otherwise.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit d4979cff06)
2021-02-26 18:07:35 +01:00
Eneas U de Queiroz
6e200ab632 php7: fix pecl build with QUILT
Commit d741a64b7 ("lang/php7: Don't run phpize7 with QUILT") changed
pecl.mk to not run phpize7 during Package/prepare if QUILT is set.  The
intention was to allow prepare, refresh and update targets to run
without building dependencies.

As a side-effect, Package/configure and Package/compile fail when QUILT
is defined because they can't find ./configure or a Makefile.  It also
impacts the github tests run with pull requests, because QUILT is
defined there.

To avoid that failure and still keep the prepare, refresh, and update
speedup, call phpize7 before Package/Configure if QUILT is defined.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 3476816cc8)
2021-02-26 18:07:30 +01:00
Alexandru Ardelean
1d5445f530 mstpd: bump to version 0.0.9
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 8520aba273)
2021-02-26 18:07:25 +01:00
Luiz Angelo Daros de Luca
276b28c196 ruby: update to 3.0.0
This release goal is performance, concurrency, and typing. See details
in https://www.ruby-lang.org/en/news/2020/12/25/ruby-3-0-0-released/

New subpackages (reflect of mostly complete upstream ruby gemification)
- ruby-abbrev (from ruby-misc)
- ruby-base64 (from ruby-misc)
- ruby-coverage (from ruby-misc)
- ruby-continuation (from ruby-misc)
- ruby-debug (from ruby-debuglib)
- ruby-english (from ruby-misc)
- ruby-expect (from ruby-misc)
- ruby-fiber (from ruby-misc)
- ruby-find (from ruby-filelib)
- ruby-io-nonblock (from ruby-multithread)
- ruby-io-wait (from ruby-multithread)
- ruby-monitor (from ruby-multithread)
- ruby-net-ftp (from ruby-net)
- ruby-net-http (from ruby-net)
- ruby-net-imap (from ruby-net)
- ruby-net-pop (from ruby-net)
- ruby-net-protocol (from ruby-net)
- ruby-objspace (from ruby-debuglib)
- ruby-open-uri (from ruby-net)
- ruby-pathname (from ruby-filelib)
- ruby-pp (from ruby-prettyprint)
- ruby-pty (from ruby-misc)
- ruby-rbs (NEW)
- ruby-resolv (from ruby-socket)
- ruby-resolv-replace (from ruby-socket)
- ruby-securerandom (from ruby-misc)
- ruby-set (from ruby-misc)
- ruby-shellwords (from ruby-misc)
- ruby-syslog (from ruby-logger)
- ruby-tempfile (from ruby-filelib)
- ruby-tmpdir (from ruby-filelib)
- ruby-tsort (from ruby-misc)
- ruby-typeprof (NEW)
- ruby-un (from ruby-mkmf)
- ruby-weakref (from ruby-misc)

Removed subpackages
- ruby-debuglib (split into ruby-debug,ruby-objspace)
- ruby-filelib (split into ruby-find,ruby-pathname,ruby-tempfile,ruby-tmpdir)
- ruby-misc (split into ruby-abbrev,ruby-base64,ruby-continuation,
    ruby-coverage,ruby-english,ruby-expect,ruby-fiber,ruby-securerandom,
    ruby-set,ruby-shellwords,ruby-tsort,ruby-weakref)
- ruby-multithread (split into ruby-io-nonblock,ruby-io-wait,ruby-monitor)
- ruby-net (split into ruby-net-ftp,ruby-net-http,ruby-net-imap,ruby-net-pop,
    ruby-net-protocol,ruby-open-uri)
- ruby-net-telnet (removed upstream)
- ruby-sdbm (removed upstream)
- ruby-webrick (removed upstream)
- ruby-xmlrpc (removed upstream)

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit fe4020f23e)
2021-02-26 13:04:06 +01:00
Rosen Penev
e3cf0d1218 boinc: update to 7.16.16
Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ce361e3c1a)
2021-02-26 13:03:33 +01:00
Rosen Penev
50512fccd1 dovecot: update to 2.3.13
Fixed and refreshed patches.

Switched to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 6baf7dd125)
2021-02-26 13:03:27 +01:00
Rosen Penev
54a511072b curl: update to 7.75.0
Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d55ea14a46)
2021-02-26 13:03:22 +01:00
Hirokazu MORIKAWA
30a45f2810 node: bump to v14.16.0
Update to v14.16.0

February 2021 Security Releases
- HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion (Critical) (CVE-2021-22883)
- DNS rebinding in --inspect (CVE-2021-22884)
- OpenSSL - Integer overflow in CipherUpdate (CVE-2021-23840)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit a68820bb74)
2021-02-26 12:49:41 +01:00
Hirokazu MORIKAWA
6c47d84759 node: make hostpkg icu-enabled
Made the necessary changes to build the latest version of adguardhome.
See this thread : https://github.com/openwrt/packages/pull/14717

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 884761c4df)
2021-02-26 12:49:25 +01:00
Eneas U de Queiroz
782d320172 dockerd: fix build with golang 1.16
Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.

Module-aware mode will be mandatory in the next golang release.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 8a4bb56478)
2021-02-26 12:48:48 +01:00
Gerard Ryan
2b00d0be06 dockerd: Package release bump
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit e882ff47e5)
2021-02-26 12:48:43 +01:00
Eneas U de Queiroz
40b63e39aa oci-runtime-tools: fix build with golang 1.16
Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.

Module-aware mode will be mandatory in the next golang release.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit bb9641e702)
2021-02-26 12:47:31 +01:00
Eneas U de Queiroz
b0a410d378 libnetwork: fix build with golang 1.16
Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.

Module-aware mode will be mandatory in the next golang release.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit d9f7dff4a0)
2021-02-26 12:47:26 +01:00
Eneas U de Queiroz
66ec425ce7 docker: fix build with golang 1.16
Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.

Module-aware mode will be mandatory in the next golang release.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 5b2d0609c7)
2021-02-26 12:47:22 +01:00
Eneas U de Queiroz
751715e824 containerd: fix build with golang 1.16
Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.

Module-aware mode will be mandatory in the next golang release.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 2d48a7b6e0)
2021-02-26 12:47:15 +01:00
Eneas U de Queiroz
aa382aad96 cni: fix build with golang 1.16
Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.

Module-aware mode will be mandatory in the next golang release.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 619270da0e)
2021-02-26 12:47:10 +01:00
Eneas U de Queiroz
067f4b56b3 tor-fw-helper: fix build with golang 1.16
Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.

Module-aware mode will be mandatory in the next golang release.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit cffae02037)
2021-02-26 12:47:06 +01:00
Eneas U de Queiroz
c33122dbd9 restic-rest-server: fix build with golang 1.16
Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.

Module-aware mode will be mandatory in the next golang release.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit b732157dec)
2021-02-26 12:47:02 +01:00
Hirokazu MORIKAWA
243cc9a3f0 node-yarn: add new package - for building adguardhome
Add the necessary new package to build the latest version of adguardhome.
See this thread : https://github.com/openwrt/packages/pull/14717

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-02-26 17:48:28 +09:00
Alexandru Ardelean
cac54a66f4 django: bump to version 3.1.7
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmai.com>
(cherry picked from commit dd58d24699)
2021-02-26 07:38:51 +01:00
Eneas U de Queiroz
97bec5a53a setools: Avoid using host libraries
This adds $STAGING_DIR to library search paths in setup.py, to avoid
picking up host libraries when linking.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 0aff79f29f)
2021-02-26 07:38:25 +01:00
Eneas U de Queiroz
0890169df1 libupm: enforce disabling python2
If there are more than two python3 interpreters, and no python2,
libupm thinks one of them is python2 and fails.  Avoid that by
telling it that python2 was not found.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 30a8d8db6a)
2021-02-26 07:38:18 +01:00
Eneas U de Queiroz
673c341394 lxc: fix build without seccomp if libseccomp built
This fixes compiling lxc without seccomp support if libseccomp is
already installed to the staging dir.  Patches were applied upstream.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 470176905d)
2021-02-26 07:38:02 +01:00
Eneas U de Queiroz
eec3ece900 libdaq3,snort3: install/use libdaq3 in its own dir
If used with default paths, libdaq 2.x and libdaq 3.x will overwrite
some of the other version's files.  Install them in different places to
avoid trouble.

Snort is the only package that uses libdaq, so update it at the same
time to avoid creating a failing commit.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 92cdc620b6)
2021-02-26 07:37:41 +01:00
Eneas U de Queiroz
6b05c7ae76 libdaq,snort: install/use libdaq2 in its own dir
If used with default paths, libdaq 2.x and libdaq 3.x will overwrite
some of the other version's files.  Install them in different places to
avoid trouble.

Snort is the only package that uses libdaq, so update it at the same
time to avoid creating a failing commit.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 48e2b6ebb3)
2021-02-26 07:37:32 +01:00
Rosen Penev
7852ef7ccb Merge pull request #14904 from stangri/21.02-vpn-policy-routing
[21.02] vpn-policy-routing: update user netflix file
2021-02-25 21:12:33 -08:00
Stan Grishin
b681aac3c2 vpn-policy-routing: update user netflix file
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-02-26 02:16:59 +00:00
Rosen Penev
2a5896dcae Merge pull request #14884 from jefferyto/treewide-refresh-patches-openwrt-21.02
[openwrt-21.02] treewide: Run refresh on all packages
2021-02-25 14:05:23 -08:00
Hannu Nyman
7263be101b nano: update to version 5.6
Upgrade nano to version 5.6

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit dffdfe4ac8)
2021-02-25 16:59:31 +02:00
Rosen Penev
681eced8ba Merge pull request #14889 from stangri/21.02-vpn-policy-routing
[21.02] vpn-policy-routing: custom user scripts improvements
2021-02-24 16:53:44 -08:00
Stan Grishin
dc8a73d171 vpn-policy-routing: custom user scripts improvements
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-02-24 19:44:26 +00:00
Ilya Lipnitskiy
b1cbd93bcd treewide: Run refresh on all packages
The crude loop I wrote to come up with this changeset:

  find -L package/feeds/packages/ -name patches | \
  sed 's/patches$/refresh/' | sort | xargs make

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
(cherry picked from commit 5d8d4fbbcb)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-02-25 01:26:05 +08:00
Jan Hak
99a5a094eb liburcu: update to version 0.12.2
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 9443203377)
2021-02-24 10:22:52 +01:00
Jan Hak
9b29246fec libedit: update to version 20210216-3.1
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit fd7f43ae46)
2021-02-24 10:20:00 +01:00
Jan Pavlinec
0d56e8c19e knot-resolver: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit bb1f6174fa)
2021-02-23 14:20:29 +01:00
Rosen Penev
1da33ba207 Merge pull request #14852 from 1715173329/2102-xr-mter
[openwrt-21.02] xray-core: remove myself from maintainters
2021-02-23 05:18:04 -08:00
Rosen Penev
9698c73b5d Merge pull request #14866 from stangri/21.02-https-dns-proxy
[21.02] https-dns-proxy: add Force DNS support
2021-02-23 05:11:21 -08:00
Rosen Penev
be990d48e2 Merge pull request #14868 from stangri/21.02-vpn-policy-routing
[21.02] vpn-policy-routing: update config file, support PROCD_RELOAD_DELAY
2021-02-23 05:10:59 -08:00
Josef Schlehofer
5666034823 screen: backport fix for CVE-2021-26937
Security reports:
- https://lists.gnu.org/archive/html/screen-devel/2021-02/msg00000.html
This issue can be reproduced even on OpenWrt
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=982435

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c250298fa3)
2021-02-23 06:10:06 -05:00
Stan Grishin
4a067d59fd vpn-policy-routing: update config file, support PROCD_RELOAD_DELAY
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-02-23 01:12:39 +00:00
Stan Grishin
02a91cc3ef https-dns-proxy: add Force DNS support
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-02-23 01:04:52 +00:00
Rosen Penev
597fbe5f03 Merge pull request #14834 from jefferyto/golang-1.16-openwrt-21.02
[openwrt-21.02] golang: Update to 1.16
2021-02-22 15:16:21 -08:00
Rosen Penev
ca712dd259 Merge pull request #14851 from 1715173329/2102-yq-mter
[openwrt-21.02] yq: bump to 4.6.0, remove myself from maintainters
2021-02-22 14:43:15 -08:00
Rosen Penev
a384058a89 Merge pull request #14848 from jefferyto/python-config-macos-openwrt-21.02
[openwrt-21.02] python3: Fix target python-config when building on macOS
2021-02-22 14:21:21 -08:00
Josef Schlehofer
743d7bcf2d netdata: update to version 1.29.2
Release notes:
https://github.com/netdata/netdata/releases/tag/v1.29.2

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e8021bf14d)
2021-02-22 19:54:00 +01:00
Tianling Shen
b21c5c1e1c xray-core: remove myself from maintainters
Signed-off-by: Tianling Shen <cnsztl@gmail.com>
(Backported from 024112605a)
2021-02-23 00:37:48 +08:00
Tianling Shen
4836e407d7 yq: Update to 4.6.0
Signed-off-by: Tianling Shen <cnsztl@gmail.com>
(Backported from b8a2c86aa7)
2021-02-23 00:35:15 +08:00
Tianling Shen
bc23fd3d28 yq: remove myself from maintainters
Signed-off-by: Tianling Shen <cnsztl@gmail.com>
(Backported from f56d697985)
2021-02-23 00:34:50 +08:00
Jeffery To
6ce32c3b5e python3: Fix target python-config when building on macOS
The Python version of python-config is installed when building on macOS,
rather than the shell script version when building on Linux. When run on
macOS, the Python version of python-config will return values with
Mac-specific customizations.

This patches the python-config install recipe so that which version is
installed can be controlled by the package makefile. When building on
macOS, this installs the Python version for host Python and the shell
script version for target Python.

This also updates Host/Compile and Host/Install to use the default host
build recipes, so that the various HOST_* variables are taken into
account automatically.

Fixes https://github.com/openwrt/packages/issues/14652

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 18330902a0)
2021-02-22 22:09:54 +08:00
Jeffery To
75d276fe33 golang: Update to 1.16
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit dc587eccb7)
2021-02-22 17:08:36 +08:00
Jan Pavlinec
2bb46e74f9 git-lfs: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 0bc2f89ae1)
2021-02-21 08:56:56 +01:00
Matt Merhar
91902ec5e7 perl-try-tiny: use relative include of perlmod.mk
The $(TOPDIR) seemed to cause Makefile parsing issues with CI.

Signed-off-by: Matt Merhar <mattmerhar@protonmail.com>
(cherry picked from commit 52668b1e97)
2021-02-21 08:50:30 +01:00
Jan Pavlinec
eec6b56d8a dnstap: update to version 0.4.0
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 5514fca2b7)
2021-02-21 08:49:55 +01:00
Noah Meyerhans
99f620137f bind: bump to 9.17.10
Add build dependency on libnghttp2 for DNS-over-HTTPS support

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit f33ab76019)
2021-02-21 08:49:31 +01:00
Jan Pavlinec
50b5c5b77f tor: update to version 0.4.5.6
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 17056742ad)
2021-02-21 08:49:09 +01:00
Moritz Warning
86cf417bfe zerotier: bump to 1.6.4
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2021-02-21 08:48:49 +01:00
Dirk Brenken
185a717e19 banip: update to 0.7.3
* fix search string/pipe preparation for the background service
* fix IPSet maxelem limitation, made it more flexible
* fix potential error during resume action
* add Cisco Talos IP blacklist
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit b65353b4f7)
2021-02-20 15:14:49 +01:00
Álvaro Fernández Rojas
af6827459a rng-tools: fix init START
We should be using "00" to deal with alphabetical order.

Fixes: d9cea6747 ("rng-tools: start as early as possible")
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
(cherry-picked from 55b22d131)
2021-02-20 09:00:55 +01:00
Álvaro Fernández Rojas
d9cea67477 rng-tools: start as early as possible
Raspberry Pi devices (bcm2708) need this to get from:
[  102.310494] random: crng init done
to:
[   12.539744] random: crng init done

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
(cherry-picked from commit e9a126c14)
2021-02-20 08:49:20 +01:00
Rosen Penev
3cf70cd68c Merge pull request #14805 from apple-etan/21-02/feature/ek/libnetfilter-queue/ipv6
libnetfilter-queue: fix IPv6 header handling
2021-02-19 19:03:44 -08:00
Etan Kissling
aeb793af11 libnetfilter-queue: fix IPv6 header handling
Import 51f25df304aeaa6c1b02ef7456a61278ee70c102 from upstream.

Signed-off-by: Etan Kissling <etan_kissling@apple.com>
(cherry picked from commit a16faf72b1)
Signed-off-by: Etan Kissling <etan_kissling@apple.com>
2021-02-19 23:52:32 +01:00
Rosen Penev
cb448e732d Merge pull request #14803 from apple-etan/21-02/feature/ek/libnetfilter-queue/icmp
libnetfilter-queue: add pkt_buff function for ICMP
2021-02-19 14:50:46 -08:00
Etan Kissling
57662eade1 libnetfilter-queue: add pkt_buff function for ICMP
Import 662c8f44d53492d2e0ebd430dadef12d580ec330 from upstream.

Signed-off-by: Etan Kissling <etan_kissling@apple.com>
(cherry picked from commit 73060f9104)
Signed-off-by: Etan Kissling <etan_kissling@apple.com>
2021-02-19 22:47:51 +01:00
Rosen Penev
4896f0a021 Merge pull request #14795 from apple-etan/21-02/feature/ek/libnetfilter-queue/fixup
libnetfilter-queue: re-add PKG_FIXUP to fix build
2021-02-19 12:40:13 -08:00
Eneas U de Queiroz
603be683aa reptyr: Don't build for mipsel
The package does not support any mips archs, including mipsel.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit ac3beceb96)
2021-02-19 16:42:36 -03:00
Etan Kissling
9afc3eb8b6 libnetfilter-queue: re-add PKG_FIXUP to fix build
Currently when trying to build this package a build error is produced:

WARNING: 'automake-1.16' is missing on your system.
         You should only need it if you modified 'Makefile.am' or
         'configure.ac' or m4 files included by 'configure.ac'.
         The 'automake' program is part of the GNU Automake package:
         <https://www.gnu.org/software/automake>
         It also requires GNU Autoconf, GNU m4 and Perl in order to run:
         <https://www.gnu.org/software/autoconf>
         <https://www.gnu.org/software/m4/>
         <https://www.perl.org/>

This error is due to an attempt to use the native host tools instead of
the OpenWrt build system generated ones. By re-adding PKG_FIXUP it is
ensured that the correct version of the host tools are used.

Signed-off-by: Etan Kissling <etan_kissling@apple.com>
(cherry picked from commit cab73ac826)
Signed-off-by: Etan Kissling <etan_kissling@apple.com>
2021-02-19 13:12:16 +01:00
Álvaro Fernández Rojas
294f08020e bcm27xx-eeprom: update to latest version
New eeprom firmwares support recently added RPi 400 and CM4.

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
(cherry-picked from commit 7bbf6d1d0)
2021-02-19 11:13:58 +01:00
Dirk Brenken
27a448f42f banip: update to 0.7.2
* add scanning for suspicious nginx events
* add a log counter to track the number of the failed requests
  or login repetitions of the same ip in the log before banning,
  defaults are: ssh (3), luci (3), nginx (5)
* optimize the background service handling
* add 'greensnow' as a new source
* update readme and LuCI frontend regarding the new log count options

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 55d663d291)
2021-02-18 15:36:00 +01:00
1527 changed files with 37748 additions and 15809 deletions

View File

@@ -1,4 +1,4 @@
FROM debian:9
FROM debian:10
# Configuration version history
@@ -8,6 +8,7 @@ FROM debian:9
# v1.0.3 - Verify usign signatures
# v1.0.4 - Add support for Python3
# v1.0.5 - Add 19.07 public keys, verify keys
# v1.0.6 - Add 21.02 public keys, update Debian image to version 10, add rsync
RUN apt update && apt install -y \
build-essential \
@@ -23,6 +24,7 @@ python \
python3 \
signify-openbsd \
subversion \
rsync \
time \
unzip \
wget \
@@ -54,6 +56,11 @@ RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/2074BE7A.asc
&& gpg --fingerprint --with-colons '<pgpsign-19.07@openwrt.org>' | grep '^fpr:::::::::D9C6901F45C9B86858687DFF28A39BC32074BE7A:$' \
&& echo 'D9C6901F45C9B86858687DFF28A39BC32074BE7A:6:' | gpg --import-ownertrust
# OpenWrt Build System (PGP key for 21.02 release builds)
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/88CA59E8.asc' | gpg --import \
&& gpg --fingerprint --with-colons '<pgpsign-21.02@openwrt.org>' | grep '^fpr:::::::::667205E379BAF348863A5C6688CA59E88F681580:$' \
&& echo '667205E379BAF348863A5C6688CA59E88F681580:6:' | gpg --import-ownertrust
# untrusted comment: Public usign key for unattended snapshot builds
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=usign/b5043e70f9a75cde' --create-dirs -o /home/build/usign/b5043e70f9a75cde \
&& echo 'd7ac10f9ed1b38033855f3d27c9327d558444fca804c685b17d9dcfb0648228f */home/build/usign/b5043e70f9a75cde' | sha256sum --check
@@ -61,3 +68,6 @@ RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=usign/b5043e70f9
# untrusted comment: Public usign key for 19.07 release builds
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=usign/f94b9dd6febac963' --create-dirs -o /home/build/usign/f94b9dd6febac963 \
&& echo 'b1d09457cfbc36fccfe18382d65c54a2ade3e7fd3902da490a53aa517b512755 */home/build/usign/f94b9dd6febac963' | sha256sum --check
# untrusted comment: Public usign key for 21.02 release builds
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=usign/2f8b0b98e08306bf' --create-dirs -o /home/build/usign/2f8b0b98e08306bf && echo 'd102bdd75421c62490b97f520f9db06aadb44ad408b244755d26e96ea5cd3b7f */home/build/usign/2f8b0b98e08306bf' | sha256sum --check

View File

@@ -1,6 +1,6 @@
# Build/update the docker image
docker pull debian:9
docker pull debian:10
docker build --rm -t docker.io/openwrtorg/packages-cci:latest .
docker tag <IMAGE ID> docker.io/openwrtorg/packages-cci:<VERSION-TAG>
docker push docker.io/openwrtorg/packages-cci

View File

@@ -2,7 +2,7 @@ version: 2.0
jobs:
build:
docker:
- image: docker.io/openwrtorg/packages-cci:v1.0.5
- image: docker.io/openwrtorg/packages-cci:v1.0.6
environment:
- SDK_HOST: "downloads.openwrt.org"
- SDK_PATH: "snapshots/targets/ath79/generic"

View File

@@ -1,5 +1,5 @@
ARG ARCH=x86-64
FROM openwrtorg/rootfs:$ARCH
FROM openwrt/rootfs:$ARCH
ADD entrypoint.sh /entrypoint.sh

View File

@@ -1,10 +1,14 @@
#!/bin/sh
# not enabling `errtrace` and `pipefail` since those are bash specific
set -o errexit # failing commands causes script to fail
set -o nounset # undefined variables causes script to fail
mkdir -p /var/lock/
opkg update
[ -n "$CI_HELPER" ] || CI_HELPER="/ci/.github/workflows/ci_helpers.sh"
[ -n "${CI_HELPER:=''}" ] || CI_HELPER="/ci/.github/workflows/ci_helpers.sh"
for PKG in /ci/*.ipk; do
tar -xzOf "$PKG" ./control.tar.gz | tar xzf - ./control

63
.github/workflows/formal.yml vendored Normal file
View File

@@ -0,0 +1,63 @@
name: Test Formalities
on:
pull_request:
jobs:
build:
name: Test Formalities
runs-on: ubuntu-latest
strategy:
fail-fast: false
steps:
- uses: actions/checkout@v3
with:
ref: ${{ github.event.pull_request.head.sha }}
fetch-depth: 0
- name: Determine branch name
run: |
BRANCH="${GITHUB_BASE_REF#refs/heads/}"
echo "Building for $BRANCH"
echo "BRANCH=$BRANCH" >> $GITHUB_ENV
- name: Test formalities
run: |
source .github/workflows/ci_helpers.sh
RET=0
for commit in $(git rev-list HEAD ^origin/$BRANCH); do
info "=== Checking commit '$commit'"
if git show --format='%P' -s $commit | grep -qF ' '; then
err "Pull request should not include merge commits"
RET=1
fi
author="$(git show -s --format=%aN $commit)"
if echo $author | grep -q '\S\+\s\+\S\+'; then
success "Author name ($author) seems ok"
else
err "Author name ($author) need to be your real name 'firstname lastname'"
RET=1
fi
subject="$(git show -s --format=%s $commit)"
if echo "$subject" | grep -q -e '^[0-9A-Za-z,+/_-]\+: ' -e '^Revert '; then
success "Commit subject line seems ok ($subject)"
else
err "Commit subject line MUST start with '<package name>: ' ($subject)"
RET=1
fi
body="$(git show -s --format=%b $commit)"
sob="$(git show -s --format='Signed-off-by: %aN <%aE>' $commit)"
if echo "$body" | grep -qF "$sob"; then
success "Signed-off-by match author"
else
err "Signed-off-by is missing or doesn't match author (should be '$sob')"
RET=1
fi
done
exit $RET

View File

@@ -28,16 +28,30 @@ jobs:
runtime_test: true
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@v3
with:
fetch-depth: 0
- name: Determine branch name
run: |
BRANCH="${GITHUB_BASE_REF#refs/heads/}"
echo "Building for $BRANCH"
echo "BRANCH=$BRANCH" >> $GITHUB_ENV
- name: Determine changed packages
run: |
# only detect packages with changed Makefiles
PACKAGES="$(git diff --diff-filter=d --name-only origin/master \
| grep -E 'Makefile$|test.sh$' | grep -Ev '/files/|/src/' \
| awk -F/ '{ print $(NF-1) }' | tr '\n' ' ')"
# only detect packages with changes
PKG_ROOTS=$(find . -name Makefile | grep -v ".*/src/Makefile" | sed -e 's@./\(.*\)/Makefile@\1/@')
CHANGES=$(git diff --diff-filter=d --name-only origin/$BRANCH...)
for ROOT in $PKG_ROOTS; do
for CHANGE in $CHANGES; do
if [[ "$CHANGE" == "$ROOT"* ]]; then
PACKAGES+=$(echo "$ROOT" | sed -e 's@.*/\(.*\)/@\1 @')
break
fi
done
done
# fallback to test packages if nothing explicitly changes this is
# should run if other mechanics in packages.git changed
@@ -46,14 +60,8 @@ jobs:
echo "Building $PACKAGES"
echo "PACKAGES=$PACKAGES" >> $GITHUB_ENV
- name: Determine branch name
run: |
BRANCH="${GITHUB_BASE_REF#refs/heads/}"
echo "Building for $BRANCH"
echo "BRANCH=$BRANCH" >> $GITHUB_ENV
- name: Build
uses: openwrt/gh-action-sdk@v1
uses: openwrt/gh-action-sdk@v5
env:
ARCH: ${{ matrix.arch }}-${{ env.BRANCH }}
FEEDNAME: packages_ci
@@ -61,17 +69,57 @@ jobs:
- name: Move created packages to project dir
run: cp bin/packages/${{ matrix.arch }}/packages_ci/*.ipk . || true
- name: Collect metadata
run: |
MERGE_ID=$(git rev-parse --short HEAD)
echo "MERGE_ID=$MERGE_ID" >> $GITHUB_ENV
echo "BASE_ID=$(git rev-parse --short HEAD^1)" >> $GITHUB_ENV
echo "HEAD_ID=$(git rev-parse --short HEAD^2)" >> $GITHUB_ENV
PRNUMBER=${GITHUB_REF_NAME%/merge}
echo "PRNUMBER=$PRNUMBER" >> $GITHUB_ENV
echo "ARCHIVE_NAME=${{matrix.arch}}-PR$PRNUMBER-$MERGE_ID" >> $GITHUB_ENV
- name: Generate metadata
run: |
cat << _EOF_ > PKG-INFO
Metadata-Version: 2.1
Name: ${{env.ARCHIVE_NAME}}
Version: $BRANCH
Author: $GITHUB_ACTOR
Home-page: $GITHUB_SERVER_URL/$GITHUB_REPOSITORY/pull/$PRNUMBER
Download-URL: $GITHUB_SERVER_URL/$GITHUB_REPOSITORY/actions/runs/$GITHUB_RUN_ID
Summary: $PACKAGES
Platform: ${{ matrix.arch }}
Packages for OpenWrt $BRANCH running on ${{matrix.arch}}, built from PR $PRNUMBER
at commit $HEAD_ID, against $BRANCH at commit $BASE_ID, with merge SHA $MERGE_ID.
Modified packages:
_EOF_
for p in $PACKAGES
do
echo " "$p >> PKG-INFO
done
echo >> PKG-INFO
echo Full file listing: >> PKG-INFO
ls -al *.ipk >> PKG-INFO || true
cat PKG-INFO
- name: Store packages
uses: actions/upload-artifact@v2
uses: actions/upload-artifact@v3
with:
name: ${{ matrix.arch}}-packages
path: "*.ipk"
name: ${{env.ARCHIVE_NAME}}-packages
path: |
*.ipk
PKG-INFO
- name: Store logs
uses: actions/upload-artifact@v2
uses: actions/upload-artifact@v3
with:
name: ${{ matrix.arch}}-logs
path: logs/
name: ${{env.ARCHIVE_NAME}}-logs
path: |
logs/
PKG-INFO
- name: Remove logs
run: sudo rm -rf logs/ || true
@@ -86,7 +134,7 @@ jobs:
run: |
docker build -t test-container --build-arg ARCH .github/workflows/
env:
ARCH: ${{ matrix.arch }}
ARCH: ${{ matrix.arch }}-${{ env.BRANCH }}
- name: Test via Docker container
if: ${{ matrix.runtime_test }}

View File

@@ -1,6 +1,6 @@
--- a/bin/BackupPC_archive 2017-01-26 02:31:24.000000000 +0100
+++ b/bin/BackupPC_archive 2018-04-05 21:11:14.428000000 +0200
@@ -299,7 +299,7 @@
--- a/bin/BackupPC_archive
+++ b/bin/BackupPC_archive
@@ -299,7 +299,7 @@ sub ArchiveCleanup
if ( $NeedPostCmd ) {
UserCommandRun("ArchivePostUserCmd");
if ( $? && $Conf{UserCmdCheckStatus} ) {
@@ -9,9 +9,9 @@
$stat{xferOK} = 0;
}
}
--- a/bin/BackupPC_dump 2017-01-26 02:31:24.000000000 +0100
+++ b/bin/BackupPC_dump 2018-04-05 21:12:23.640000000 +0200
@@ -1067,7 +1067,7 @@
--- a/bin/BackupPC_dump
+++ b/bin/BackupPC_dump
@@ -1067,7 +1067,7 @@ sub catch_signal
# Send ALRMs to BackupPC_tarExtract if we are using it
#
if ( $tarPid > 0 ) {
@@ -20,9 +20,9 @@
}
#
--- a/configure.pl 2017-01-26 02:31:24.000000000 +0100
+++ b/configure.pl 2018-04-05 21:39:24.668000000 +0200
@@ -333,7 +333,10 @@
--- a/configure.pl
+++ b/configure.pl
@@ -333,7 +333,10 @@ while ( 1 ) {
$Conf{BackupPCUser} || "backuppc",
"backuppc-user");
if ( $opts{"set-perms"} ) {
@@ -34,7 +34,7 @@
last if ( $name ne "" );
print <<EOF;
@@ -800,6 +803,7 @@
@@ -800,6 +803,7 @@ $Conf{ParPath} = '' if ( $Conf{ParPath}
#
# Figure out sensible arguments for the ping command
#
@@ -42,9 +42,9 @@
if ( defined($Conf{PingArgs}) ) {
$Conf{PingCmd} = '$pingPath ' . $Conf{PingArgs};
} elsif ( !defined($Conf{PingCmd}) ) {
--- a/lib/BackupPC/CGI/View.pm 2017-01-26 02:31:24.000000000 +0100
+++ b/lib/BackupPC/CGI/View.pm 2018-04-05 21:46:22.664000000 +0200
@@ -46,7 +46,7 @@
--- a/lib/BackupPC/CGI/View.pm
+++ b/lib/BackupPC/CGI/View.pm
@@ -46,7 +46,7 @@ sub action
my $compress = 0;
my $fh;
my $host = $In{host};
@@ -53,7 +53,7 @@
my $type = $In{type};
my $linkHosts = 0;
my($file, $comment);
@@ -136,6 +136,10 @@
@@ -136,6 +136,10 @@ sub action
}
$s =~ s/[\n\r]+//g;
if ( $s =~ /smb: \\>/
@@ -64,9 +64,9 @@
|| $s =~ /^\s*(\d+) \(\s*\d+\.\d kb\/s\) (.*)$/
|| $s =~ /^tar: dumped \d+ files/
|| $s =~ /^\s*added interface/i
--- a/lib/BackupPC/Lib.pm 2017-01-26 02:31:24.000000000 +0100
+++ b/lib/BackupPC/Lib.pm 2018-04-05 21:48:38.048000000 +0200
@@ -512,7 +512,8 @@
--- a/lib/BackupPC/Lib.pm
+++ b/lib/BackupPC/Lib.pm
@@ -512,7 +512,8 @@ sub dirRead
}
if ( $IODirentOk ) {
@entries = sort({ $a->{inode} <=> $b->{inode} } readdirent($fh));
@@ -76,9 +76,9 @@
} else {
@entries = map { { name => $_} } readdir($fh);
}
--- a/lib/BackupPC/Xfer/Smb.pm 2017-01-26 02:31:24.000000000 +0100
+++ b/lib/BackupPC/Xfer/Smb.pm 2018-04-05 21:57:16.616000000 +0200
@@ -219,7 +219,7 @@
--- a/lib/BackupPC/Xfer/Smb.pm
+++ b/lib/BackupPC/Xfer/Smb.pm
@@ -219,7 +219,7 @@ sub readOutput
#
# MAKSYM 14082016: The next regex will never match on Samba-4.3, as
# smbclient doesn't produce output required; keeping it for older Sambas
@@ -87,7 +87,7 @@
my $sambaFileSize = $1;
my $pcFileName = $2;
(my $fileName = $pcFileName) =~ s/\\/\//g;
@@ -281,6 +281,9 @@
@@ -281,6 +281,9 @@ sub readOutput
} elsif ( /smb: \\>/
|| /^\s*tar:\d+/ # MAKSYM 14082016: ignoring 2 more Samba-4.3 specific lines
|| /^\s*WARNING:/i

View File

@@ -2,12 +2,12 @@ include $(TOPDIR)/rules.mk
include $(INCLUDE_DIR)/kernel.mk
PKG_NAME:=debian-archive-keyring
PKG_VERSION:=2019.1
PKG_RELEASE:=2
PKG_VERSION:=2021.1.1
PKG_RELEASE:=$(AUTORELEASE)
PKG_SOURCE:=debian-archive-keyring_2019.1_all.deb
PKG_SOURCE:=debian-archive-keyring_2021.1.1_all.deb
PKG_SOURCE_URL:=http://ftp.debian.org/debian/pool/main/d/debian-archive-keyring/
PKG_HASH:=9cefd8917f3d97a999c136aa87f04a3024408b5bc1de470de7d6dfa5e4bd4361
PKG_HASH:=56beca470dcd9b6d7e6c3c9e9d702101e01e9467e62810a8c357bd7b9c26251d
PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(PKG_VERSION)
PKG_MAINTAINER:=Daniel Golle <daniel@makrotopia.org>

View File

@@ -1,7 +1,5 @@
Index: gkrellm-2.3.10/server/gkrellmd.conf
===================================================================
--- gkrellm-2.3.10.orig/server/gkrellmd.conf 2008-03-09 10:19:26.000000000 +0100
+++ gkrellm-2.3.10/server/gkrellmd.conf 2008-03-09 10:19:26.000000000 +0100
--- a/server/gkrellmd.conf
+++ b/server/gkrellmd.conf
@@ -4,7 +4,7 @@
# the client update frequency. Values may be from 1 to 10 and should be
# smaller values to reduce network traffic.
@@ -31,5 +29,5 @@ Index: gkrellm-2.3.10/server/gkrellmd.conf
-#detach
+detach
# Time interval between checks for various monitors. If nfs-interval
# is <= 0 then gkrellmd will not read data for nfs file system types.
# Enable writing logging message to the system syslog file
# NOTE: On windows this enables logging to the windows event log

View File

@@ -8,12 +8,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=htop
PKG_VERSION:=3.0.5
PKG_RELEASE:=1
PKG_VERSION:=3.2.1
PKG_RELEASE:=$(AUTORELEASE)
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://codeload.github.com/htop-dev/htop/tar.gz/$(PKG_VERSION)?
PKG_HASH:=4c2629bd50895bd24082ba2f81f8c972348aa2298cc6edc6a21a7fa18b73990c
PKG_HASH:=b5ffac1949a8daaabcffa659c0964360b5008782aae4dfa7702d2323cfb4f438
PKG_LICENSE:=GPL-2.0-or-later
PKG_LICENSE_FILES:=COPYING
@@ -24,6 +24,9 @@ PKG_FIXUP:=autoreconf
PKG_BUILD_PARALLEL:=1
PKG_INSTALL:=1
PKG_CONFIG_DEPENDS:= CONFIG_HTOP_LMSENSORS
PKG_BUILD_DEPENDS:= HTOP_LMSENSORS:lm-sensors
include $(INCLUDE_DIR)/package.mk
define Package/htop
@@ -41,8 +44,24 @@ define Package/htop/description
see all processes and their full command lines.
endef
define Package/htop/config
config HTOP_LMSENSORS
bool "Compile Htop with lm-sensors support"
depends on PACKAGE_htop
default y if TARGET_x86
help
Build htop with lm-sensors support.
This doesn't add lm-sensors as dependency,
if present it'll loaded using dlopen().
endef
CONFIGURE_ARGS += \
--$(if $(CONFIG_HTOP_LMSENSORS),en,dis)able-sensors \
--enable-affinity \
--disable-capabilities \
--disable-delayacct \
--disable-unicode \
--disable-unwind \
--disable-hwloc
CONFIGURE_VARS += \

View File

@@ -11,11 +11,9 @@ Fixes: ID:461
src/plugins/lanplus/lanplus_crypt_impl.c | 28 ++++++++++++++--------------
1 file changed, 14 insertions(+), 14 deletions(-)
diff --git a/src/plugins/lanplus/lanplus_crypt_impl.c b/src/plugins/lanplus/lanplus_crypt_impl.c
index d5fac37..3c0df23 100644
--- a/src/plugins/lanplus/lanplus_crypt_impl.c
+++ b/src/plugins/lanplus/lanplus_crypt_impl.c
@@ -164,10 +164,10 @@ lanplus_encrypt_aes_cbc_128(const uint8_t * iv,
@@ -164,10 +164,10 @@ lanplus_encrypt_aes_cbc_128(const uint8_
uint8_t * output,
uint32_t * bytes_written)
{
@@ -30,7 +28,7 @@ index d5fac37..3c0df23 100644
*bytes_written = 0;
@@ -191,7 +191,7 @@ lanplus_encrypt_aes_cbc_128(const uint8_t * iv,
@@ -191,7 +191,7 @@ lanplus_encrypt_aes_cbc_128(const uint8_
assert((input_length % IPMI_CRYPT_AES_CBC_128_BLOCK_SIZE) == 0);
@@ -39,7 +37,7 @@ index d5fac37..3c0df23 100644
{
/* Error */
*bytes_written = 0;
@@ -201,7 +201,7 @@ lanplus_encrypt_aes_cbc_128(const uint8_t * iv,
@@ -201,7 +201,7 @@ lanplus_encrypt_aes_cbc_128(const uint8_
{
uint32_t tmplen;
@@ -48,7 +46,7 @@ index d5fac37..3c0df23 100644
{
*bytes_written = 0;
return; /* Error */
@@ -210,7 +210,7 @@ lanplus_encrypt_aes_cbc_128(const uint8_t * iv,
@@ -210,7 +210,7 @@ lanplus_encrypt_aes_cbc_128(const uint8_
{
/* Success */
*bytes_written += tmplen;
@@ -57,7 +55,7 @@ index d5fac37..3c0df23 100644
}
}
}
@@ -239,10 +239,10 @@ lanplus_decrypt_aes_cbc_128(const uint8_t * iv,
@@ -239,10 +239,10 @@ lanplus_decrypt_aes_cbc_128(const uint8_
uint8_t * output,
uint32_t * bytes_written)
{
@@ -72,7 +70,7 @@ index d5fac37..3c0df23 100644
if (verbose >= 5)
@@ -266,7 +266,7 @@ lanplus_decrypt_aes_cbc_128(const uint8_t * iv,
@@ -266,7 +266,7 @@ lanplus_decrypt_aes_cbc_128(const uint8_
assert((input_length % IPMI_CRYPT_AES_CBC_128_BLOCK_SIZE) == 0);
@@ -81,7 +79,7 @@ index d5fac37..3c0df23 100644
{
/* Error */
lprintf(LOG_DEBUG, "ERROR: decrypt update failed");
@@ -277,7 +277,7 @@ lanplus_decrypt_aes_cbc_128(const uint8_t * iv,
@@ -277,7 +277,7 @@ lanplus_decrypt_aes_cbc_128(const uint8_
{
uint32_t tmplen;
@@ -90,7 +88,7 @@ index d5fac37..3c0df23 100644
{
char buffer[1000];
ERR_error_string(ERR_get_error(), buffer);
@@ -290,7 +290,7 @@ lanplus_decrypt_aes_cbc_128(const uint8_t * iv,
@@ -290,7 +290,7 @@ lanplus_decrypt_aes_cbc_128(const uint8_
{
/* Success */
*bytes_written += tmplen;
@@ -99,6 +97,3 @@ index d5fac37..3c0df23 100644
}
}
--
2.16.1

View File

@@ -9,11 +9,9 @@ Complaint was that ctx isn't initialized.
src/plugins/lanplus/lanplus_crypt_impl.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/src/plugins/lanplus/lanplus_crypt_impl.c b/src/plugins/lanplus/lanplus_crypt_impl.c
index 3c0df23..d12d0e3 100644
--- a/src/plugins/lanplus/lanplus_crypt_impl.c
+++ b/src/plugins/lanplus/lanplus_crypt_impl.c
@@ -164,7 +164,7 @@ lanplus_encrypt_aes_cbc_128(const uint8_t * iv,
@@ -164,7 +164,7 @@ lanplus_encrypt_aes_cbc_128(const uint8_
uint8_t * output,
uint32_t * bytes_written)
{
@@ -22,7 +20,7 @@ index 3c0df23..d12d0e3 100644
EVP_CIPHER_CTX_init(ctx);
EVP_EncryptInit_ex(ctx, EVP_aes_128_cbc(), NULL, key, iv);
EVP_CIPHER_CTX_set_padding(ctx, 0);
@@ -239,7 +239,7 @@ lanplus_decrypt_aes_cbc_128(const uint8_t * iv,
@@ -239,7 +239,7 @@ lanplus_decrypt_aes_cbc_128(const uint8_
uint8_t * output,
uint32_t * bytes_written)
{
@@ -31,6 +29,3 @@ index 3c0df23..d12d0e3 100644
EVP_CIPHER_CTX_init(ctx);
EVP_DecryptInit_ex(ctx, EVP_aes_128_cbc(), NULL, key, iv);
EVP_CIPHER_CTX_set_padding(ctx, 0);
--
2.16.1

View File

@@ -11,11 +11,9 @@ deprecated, and by checking return value of call to former function.
src/plugins/lanplus/lanplus_crypt_impl.c | 14 ++++++++++----
1 file changed, 10 insertions(+), 4 deletions(-)
diff --git a/src/plugins/lanplus/lanplus_crypt_impl.c b/src/plugins/lanplus/lanplus_crypt_impl.c
index d12d0e3..0e330c1 100644
--- a/src/plugins/lanplus/lanplus_crypt_impl.c
+++ b/src/plugins/lanplus/lanplus_crypt_impl.c
@@ -165,10 +165,13 @@ lanplus_encrypt_aes_cbc_128(const uint8_t * iv,
@@ -165,10 +165,13 @@ lanplus_encrypt_aes_cbc_128(const uint8_
uint32_t * bytes_written)
{
EVP_CIPHER_CTX *ctx = NULL;
@@ -31,7 +29,7 @@ index d12d0e3..0e330c1 100644
*bytes_written = 0;
@@ -240,11 +243,14 @@ lanplus_decrypt_aes_cbc_128(const uint8_t * iv,
@@ -240,11 +243,14 @@ lanplus_decrypt_aes_cbc_128(const uint8_
uint32_t * bytes_written)
{
EVP_CIPHER_CTX *ctx = NULL;
@@ -48,6 +46,3 @@ index d12d0e3..0e330c1 100644
if (verbose >= 5)
{
printbuf(iv, 16, "decrypting with this IV");
--
2.16.1

View File

@@ -10,11 +10,9 @@ leak.
src/plugins/lanplus/lanplus_crypt_impl.c | 44 +++++++++++++++++---------------
1 file changed, 23 insertions(+), 21 deletions(-)
diff --git a/src/plugins/lanplus/lanplus_crypt_impl.c b/src/plugins/lanplus/lanplus_crypt_impl.c
index 0e330c1..9652a5e 100644
--- a/src/plugins/lanplus/lanplus_crypt_impl.c
+++ b/src/plugins/lanplus/lanplus_crypt_impl.c
@@ -165,13 +165,6 @@ lanplus_encrypt_aes_cbc_128(const uint8_t * iv,
@@ -165,13 +165,6 @@ lanplus_encrypt_aes_cbc_128(const uint8_
uint32_t * bytes_written)
{
EVP_CIPHER_CTX *ctx = NULL;
@@ -28,7 +26,7 @@ index 0e330c1..9652a5e 100644
*bytes_written = 0;
@@ -185,6 +178,14 @@ lanplus_encrypt_aes_cbc_128(const uint8_t * iv,
@@ -185,6 +178,14 @@ lanplus_encrypt_aes_cbc_128(const uint8_
printbuf(input, input_length, "encrypting this data");
}
@@ -43,7 +41,7 @@ index 0e330c1..9652a5e 100644
/*
* The default implementation adds a whole block of padding if the input
@@ -198,7 +199,6 @@ lanplus_encrypt_aes_cbc_128(const uint8_t * iv,
@@ -198,7 +199,6 @@ lanplus_encrypt_aes_cbc_128(const uint8_
{
/* Error */
*bytes_written = 0;
@@ -51,7 +49,7 @@ index 0e330c1..9652a5e 100644
}
else
{
@@ -206,16 +206,17 @@ lanplus_encrypt_aes_cbc_128(const uint8_t * iv,
@@ -206,16 +206,17 @@ lanplus_encrypt_aes_cbc_128(const uint8_
if(!EVP_EncryptFinal_ex(ctx, output + *bytes_written, (int *)&tmplen))
{
@@ -71,7 +69,7 @@ index 0e330c1..9652a5e 100644
}
@@ -243,13 +244,6 @@ lanplus_decrypt_aes_cbc_128(const uint8_t * iv,
@@ -243,13 +244,6 @@ lanplus_decrypt_aes_cbc_128(const uint8_
uint32_t * bytes_written)
{
EVP_CIPHER_CTX *ctx = NULL;
@@ -85,7 +83,7 @@ index 0e330c1..9652a5e 100644
if (verbose >= 5)
{
@@ -258,12 +252,20 @@ lanplus_decrypt_aes_cbc_128(const uint8_t * iv,
@@ -258,12 +252,20 @@ lanplus_decrypt_aes_cbc_128(const uint8_
printbuf(input, input_length, "decrypting this data");
}
@@ -107,7 +105,7 @@ index 0e330c1..9652a5e 100644
/*
* The default implementation adds a whole block of padding if the input
* data is perfectly aligned. We would like to keep that from happening.
@@ -277,7 +279,6 @@ lanplus_decrypt_aes_cbc_128(const uint8_t * iv,
@@ -277,7 +279,6 @@ lanplus_decrypt_aes_cbc_128(const uint8_
/* Error */
lprintf(LOG_DEBUG, "ERROR: decrypt update failed");
*bytes_written = 0;
@@ -115,7 +113,7 @@ index 0e330c1..9652a5e 100644
}
else
{
@@ -285,20 +286,21 @@ lanplus_decrypt_aes_cbc_128(const uint8_t * iv,
@@ -285,20 +286,21 @@ lanplus_decrypt_aes_cbc_128(const uint8_
if (!EVP_DecryptFinal_ex(ctx, output + *bytes_written, (int *)&tmplen))
{
@@ -139,6 +137,3 @@ index 0e330c1..9652a5e 100644
if (verbose >= 5)
{
--
2.16.1

View File

@@ -14,11 +14,9 @@ Signed-off-by: Rosen Penev <rosenp@gmail.com>
src/plugins/lanplus/lanplus_crypt_impl.c | 8 ++++++++
1 file changed, 8 insertions(+)
diff --git a/src/plugins/lanplus/lanplus_crypt_impl.c b/src/plugins/lanplus/lanplus_crypt_impl.c
index 9652a5e..e94401e 100644
--- a/src/plugins/lanplus/lanplus_crypt_impl.c
+++ b/src/plugins/lanplus/lanplus_crypt_impl.c
@@ -183,7 +183,11 @@ lanplus_encrypt_aes_cbc_128(const uint8_t * iv,
@@ -183,7 +183,11 @@ lanplus_encrypt_aes_cbc_128(const uint8_
lprintf(LOG_DEBUG, "ERROR: EVP_CIPHER_CTX_new() failed");
return;
}
@@ -30,7 +28,7 @@ index 9652a5e..e94401e 100644
EVP_EncryptInit_ex(ctx, EVP_aes_128_cbc(), NULL, key, iv);
EVP_CIPHER_CTX_set_padding(ctx, 0);
@@ -262,7 +266,11 @@ lanplus_decrypt_aes_cbc_128(const uint8_t * iv,
@@ -262,7 +266,11 @@ lanplus_decrypt_aes_cbc_128(const uint8_
lprintf(LOG_DEBUG, "ERROR: EVP_CIPHER_CTX_new() failed");
return;
}
@@ -42,6 +40,3 @@ index 9652a5e..e94401e 100644
EVP_DecryptInit_ex(ctx, EVP_aes_128_cbc(), NULL, key, iv);
EVP_CIPHER_CTX_set_padding(ctx, 0);
--
2.7.4

View File

@@ -17,8 +17,6 @@ The same issue affects the `read_fru_area` function.
lib/ipmi_fru.c | 33 +++++++++++++++++++++++++++++++--
1 file changed, 31 insertions(+), 2 deletions(-)
diff --git a/lib/ipmi_fru.c b/lib/ipmi_fru.c
index cf00effc82a2..af99aa99444c 100644
--- a/lib/ipmi_fru.c
+++ b/lib/ipmi_fru.c
@@ -615,7 +615,10 @@ int
@@ -33,7 +31,7 @@ index cf00effc82a2..af99aa99444c 100644
struct ipmi_rs * rsp;
struct ipmi_rq req;
uint8_t msg_data[4];
@@ -628,10 +631,12 @@ read_fru_area(struct ipmi_intf * intf, struct fru_info *fru, uint8_t id,
@@ -628,10 +631,12 @@ read_fru_area(struct ipmi_intf * intf, s
finish = offset + length;
if (finish > fru->size) {
@@ -46,7 +44,7 @@ index cf00effc82a2..af99aa99444c 100644
}
memset(&req, 0, sizeof(req));
@@ -667,6 +672,7 @@ read_fru_area(struct ipmi_intf * intf, struct fru_info *fru, uint8_t id,
@@ -667,6 +672,7 @@ read_fru_area(struct ipmi_intf * intf, s
}
}
@@ -54,7 +52,7 @@ index cf00effc82a2..af99aa99444c 100644
do {
tmp = fru->access ? off >> 1 : off;
msg_data[0] = id;
@@ -707,9 +713,18 @@ read_fru_area(struct ipmi_intf * intf, struct fru_info *fru, uint8_t id,
@@ -707,9 +713,18 @@ read_fru_area(struct ipmi_intf * intf, s
}
tmp = fru->access ? rsp->data[0] << 1 : rsp->data[0];
@@ -73,7 +71,7 @@ index cf00effc82a2..af99aa99444c 100644
/* sometimes the size returned in the Info command
* is too large. return 0 so higher level function
* still attempts to parse what was returned */
@@ -742,7 +757,9 @@ read_fru_area_section(struct ipmi_intf * intf, struct fru_info *fru, uint8_t id,
@@ -742,7 +757,9 @@ read_fru_area_section(struct ipmi_intf *
uint32_t offset, uint32_t length, uint8_t *frubuf)
{
static uint32_t fru_data_rqst_size = 20;
@@ -84,7 +82,7 @@ index cf00effc82a2..af99aa99444c 100644
struct ipmi_rs * rsp;
struct ipmi_rq req;
uint8_t msg_data[4];
@@ -755,10 +772,12 @@ read_fru_area_section(struct ipmi_intf * intf, struct fru_info *fru, uint8_t id,
@@ -755,10 +772,12 @@ read_fru_area_section(struct ipmi_intf *
finish = offset + length;
if (finish > fru->size) {
@@ -97,7 +95,7 @@ index cf00effc82a2..af99aa99444c 100644
}
memset(&req, 0, sizeof(req));
@@ -773,6 +792,8 @@ read_fru_area_section(struct ipmi_intf * intf, struct fru_info *fru, uint8_t id,
@@ -773,6 +792,8 @@ read_fru_area_section(struct ipmi_intf *
if (fru->access && fru_data_rqst_size > 16)
#endif
fru_data_rqst_size = 16;
@@ -106,7 +104,7 @@ index cf00effc82a2..af99aa99444c 100644
do {
tmp = fru->access ? off >> 1 : off;
msg_data[0] = id;
@@ -804,8 +825,16 @@ read_fru_area_section(struct ipmi_intf * intf, struct fru_info *fru, uint8_t id,
@@ -804,8 +825,16 @@ read_fru_area_section(struct ipmi_intf *
}
tmp = fru->access ? rsp->data[0] << 1 : rsp->data[0];
@@ -123,6 +121,3 @@ index cf00effc82a2..af99aa99444c 100644
/* sometimes the size returned in the Info command
* is too large. return 0 so higher level function
--
2.27.0

View File

@@ -16,11 +16,9 @@ copy into the buffer.
lib/dimm_spd.c | 9 ++++++++-
1 file changed, 8 insertions(+), 1 deletion(-)
diff --git a/lib/dimm_spd.c b/lib/dimm_spd.c
index 41e30dbb4bda..68f3b4fa1eff 100644
--- a/lib/dimm_spd.c
+++ b/lib/dimm_spd.c
@@ -1621,7 +1621,7 @@ ipmi_spd_print_fru(struct ipmi_intf * intf, uint8_t id)
@@ -1621,7 +1621,7 @@ ipmi_spd_print_fru(struct ipmi_intf * in
struct ipmi_rq req;
struct fru_info fru;
uint8_t *spd_data, msg_data[4];
@@ -29,7 +27,7 @@ index 41e30dbb4bda..68f3b4fa1eff 100644
msg_data[0] = id;
@@ -1697,6 +1697,13 @@ ipmi_spd_print_fru(struct ipmi_intf * intf, uint8_t id)
@@ -1697,6 +1697,13 @@ ipmi_spd_print_fru(struct ipmi_intf * in
}
len = rsp->data[0];
@@ -43,6 +41,3 @@ index 41e30dbb4bda..68f3b4fa1eff 100644
memcpy(&spd_data[offset], rsp->data + 1, len);
offset += len;
} while (offset < fru.size);
--
2.27.0

View File

@@ -13,11 +13,9 @@ overflow.
lib/ipmi_session.c | 12 ++++++++----
1 file changed, 8 insertions(+), 4 deletions(-)
diff --git a/lib/ipmi_session.c b/lib/ipmi_session.c
index 141f0f4ec8dd..b9af1fd75d40 100644
--- a/lib/ipmi_session.c
+++ b/lib/ipmi_session.c
@@ -309,8 +309,10 @@ ipmi_get_session_info(struct ipmi_intf * intf,
@@ -309,8 +309,10 @@ ipmi_get_session_info(struct ipmi_intf
}
else
{
@@ -30,7 +28,7 @@ index 141f0f4ec8dd..b9af1fd75d40 100644
}
break;
@@ -341,8 +343,10 @@ ipmi_get_session_info(struct ipmi_intf * intf,
@@ -341,8 +343,10 @@ ipmi_get_session_info(struct ipmi_intf
break;
}
@@ -43,6 +41,3 @@ index 141f0f4ec8dd..b9af1fd75d40 100644
} while (i <= session_info.session_slot_count);
break;
--
2.27.0

View File

@@ -16,11 +16,9 @@ on the final copy.
lib/ipmi_channel.c | 5 ++++-
1 file changed, 4 insertions(+), 1 deletion(-)
diff --git a/lib/ipmi_channel.c b/lib/ipmi_channel.c
index fab2e5483d12..8cd7c59a4273 100644
--- a/lib/ipmi_channel.c
+++ b/lib/ipmi_channel.c
@@ -413,7 +413,10 @@ ipmi_get_channel_cipher_suites(struct ipmi_intf *intf, const char *payload_type,
@@ -413,7 +413,10 @@ ipmi_get_channel_cipher_suites(struct ip
lprintf(LOG_ERR, "Unable to Get Channel Cipher Suites");
return -1;
}
@@ -32,6 +30,3 @@ index fab2e5483d12..8cd7c59a4273 100644
lprintf(LOG_ERR, "Get Channel Cipher Suites failed: %s",
val2str(rsp->ccode, completion_code_vals));
return -1;
--
2.27.0

View File

@@ -16,11 +16,9 @@ stack buffer overflow can occur.
lib/ipmi_lanp.c | 14 +++++++-------
1 file changed, 7 insertions(+), 7 deletions(-)
diff --git a/lib/ipmi_lanp.c b/lib/ipmi_lanp.c
index 65d881bc5890..022c7f1605ed 100644
--- a/lib/ipmi_lanp.c
+++ b/lib/ipmi_lanp.c
@@ -1809,7 +1809,7 @@ ipmi_lan_alert_set(struct ipmi_intf * intf, uint8_t chan, uint8_t alert,
@@ -1809,7 +1809,7 @@ ipmi_lan_alert_set(struct ipmi_intf * in
if (p == NULL) {
return (-1);
}
@@ -29,7 +27,7 @@ index 65d881bc5890..022c7f1605ed 100644
/* set new ipaddr */
memcpy(data+3, temp, 4);
printf("Setting LAN Alert %d IP Address to %d.%d.%d.%d\n", alert,
@@ -1824,7 +1824,7 @@ ipmi_lan_alert_set(struct ipmi_intf * intf, uint8_t chan, uint8_t alert,
@@ -1824,7 +1824,7 @@ ipmi_lan_alert_set(struct ipmi_intf * in
if (p == NULL) {
return (-1);
}
@@ -38,7 +36,7 @@ index 65d881bc5890..022c7f1605ed 100644
/* set new macaddr */
memcpy(data+7, temp, 6);
printf("Setting LAN Alert %d MAC Address to "
@@ -1838,7 +1838,7 @@ ipmi_lan_alert_set(struct ipmi_intf * intf, uint8_t chan, uint8_t alert,
@@ -1838,7 +1838,7 @@ ipmi_lan_alert_set(struct ipmi_intf * in
if (p == NULL) {
return (-1);
}
@@ -47,7 +45,7 @@ index 65d881bc5890..022c7f1605ed 100644
if (strncasecmp(argv[1], "def", 3) == 0 ||
strncasecmp(argv[1], "default", 7) == 0) {
@@ -1864,7 +1864,7 @@ ipmi_lan_alert_set(struct ipmi_intf * intf, uint8_t chan, uint8_t alert,
@@ -1864,7 +1864,7 @@ ipmi_lan_alert_set(struct ipmi_intf * in
if (p == NULL) {
return (-1);
}
@@ -56,7 +54,7 @@ index 65d881bc5890..022c7f1605ed 100644
if (strncasecmp(argv[1], "on", 2) == 0 ||
strncasecmp(argv[1], "yes", 3) == 0) {
@@ -1889,7 +1889,7 @@ ipmi_lan_alert_set(struct ipmi_intf * intf, uint8_t chan, uint8_t alert,
@@ -1889,7 +1889,7 @@ ipmi_lan_alert_set(struct ipmi_intf * in
if (p == NULL) {
return (-1);
}
@@ -65,7 +63,7 @@ index 65d881bc5890..022c7f1605ed 100644
if (strncasecmp(argv[1], "pet", 3) == 0) {
printf("Setting LAN Alert %d destination to PET Trap\n", alert);
@@ -1917,7 +1917,7 @@ ipmi_lan_alert_set(struct ipmi_intf * intf, uint8_t chan, uint8_t alert,
@@ -1917,7 +1917,7 @@ ipmi_lan_alert_set(struct ipmi_intf * in
if (p == NULL) {
return (-1);
}
@@ -74,7 +72,7 @@ index 65d881bc5890..022c7f1605ed 100644
if (str2uchar(argv[1], &data[2]) != 0) {
lprintf(LOG_ERR, "Invalid time: %s", argv[1]);
@@ -1933,7 +1933,7 @@ ipmi_lan_alert_set(struct ipmi_intf * intf, uint8_t chan, uint8_t alert,
@@ -1933,7 +1933,7 @@ ipmi_lan_alert_set(struct ipmi_intf * in
if (p == NULL) {
return (-1);
}
@@ -83,6 +81,3 @@ index 65d881bc5890..022c7f1605ed 100644
if (str2uchar(argv[1], &data[3]) != 0) {
lprintf(LOG_ERR, "Invalid retry: %s", argv[1]);
--
2.27.0

View File

@@ -23,11 +23,9 @@ into fixed buffer of size `17` bytes from this calculated length.
lib/ipmi_sdr.c | 40 ++++++++++++++++++++++++----------------
2 files changed, 25 insertions(+), 17 deletions(-)
diff --git a/lib/ipmi_fru.c b/lib/ipmi_fru.c
index af99aa99444c..98bc9840955a 100644
--- a/lib/ipmi_fru.c
+++ b/lib/ipmi_fru.c
@@ -3062,7 +3062,7 @@ ipmi_fru_print(struct ipmi_intf * intf, struct sdr_record_fru_locator * fru)
@@ -3062,7 +3062,7 @@ ipmi_fru_print(struct ipmi_intf * intf,
return 0;
memset(desc, 0, sizeof(desc));
@@ -36,11 +34,9 @@ index af99aa99444c..98bc9840955a 100644
desc[fru->id_code & 0x01f] = 0;
printf("FRU Device Description : %s (ID %d)\n", desc, fru->device_id);
diff --git a/lib/ipmi_sdr.c b/lib/ipmi_sdr.c
index 2a9cbe3087af..62aac08a9002 100644
--- a/lib/ipmi_sdr.c
+++ b/lib/ipmi_sdr.c
@@ -2084,7 +2084,7 @@ ipmi_sdr_print_sensor_eventonly(struct ipmi_intf *intf,
@@ -2084,7 +2084,7 @@ ipmi_sdr_print_sensor_eventonly(struct i
return -1;
memset(desc, 0, sizeof (desc));
@@ -49,7 +45,7 @@ index 2a9cbe3087af..62aac08a9002 100644
if (verbose) {
printf("Sensor ID : %s (0x%x)\n",
@@ -2135,7 +2135,7 @@ ipmi_sdr_print_sensor_mc_locator(struct ipmi_intf *intf,
@@ -2135,7 +2135,7 @@ ipmi_sdr_print_sensor_mc_locator(struct
return -1;
memset(desc, 0, sizeof (desc));
@@ -58,7 +54,7 @@ index 2a9cbe3087af..62aac08a9002 100644
if (verbose == 0) {
if (csv_output)
@@ -2228,7 +2228,7 @@ ipmi_sdr_print_sensor_generic_locator(struct ipmi_intf *intf,
@@ -2228,7 +2228,7 @@ ipmi_sdr_print_sensor_generic_locator(st
char desc[17];
memset(desc, 0, sizeof (desc));
@@ -67,7 +63,7 @@ index 2a9cbe3087af..62aac08a9002 100644
if (!verbose) {
if (csv_output)
@@ -2285,7 +2285,7 @@ ipmi_sdr_print_sensor_fru_locator(struct ipmi_intf *intf,
@@ -2285,7 +2285,7 @@ ipmi_sdr_print_sensor_fru_locator(struct
char desc[17];
memset(desc, 0, sizeof (desc));
@@ -76,7 +72,7 @@ index 2a9cbe3087af..62aac08a9002 100644
if (!verbose) {
if (csv_output)
@@ -2489,35 +2489,43 @@ ipmi_sdr_print_name_from_rawentry(struct ipmi_intf *intf, uint16_t id,
@@ -2489,35 +2489,43 @@ ipmi_sdr_print_name_from_rawentry(struct
int rc =0;
char desc[17];
@@ -132,6 +128,3 @@ index 2a9cbe3087af..62aac08a9002 100644
return rc;
}
--
2.27.0

View File

@@ -9,8 +9,6 @@ Signed-off-by: Vaclav Dolezal <vdolezal@redhat.com>
lib/ipmi_hpmfwupg.c | 2 ++
2 files changed, 3 insertions(+), 1 deletion(-)
diff --git a/include/ipmitool/ipmi_hpmfwupg.h b/include/ipmitool/ipmi_hpmfwupg.h
index de65292b..07f597be 100644
--- a/include/ipmitool/ipmi_hpmfwupg.h
+++ b/include/ipmitool/ipmi_hpmfwupg.h
@@ -800,7 +800,7 @@ typedef struct _VERSIONINFO {
@@ -22,11 +20,9 @@ index de65292b..07f597be 100644
#define TARGET_VER (0x01)
#define ROLLBACK_VER (0x02)
diff --git a/lib/ipmi_hpmfwupg.c b/lib/ipmi_hpmfwupg.c
index 4aa8cecd..d63d2c15 100644
--- a/lib/ipmi_hpmfwupg.c
+++ b/lib/ipmi_hpmfwupg.c
@@ -58,6 +58,8 @@
@@ -58,6 +58,8 @@ ipmi_intf_get_max_request_data_size(stru
extern int verbose;

View File

@@ -1,5 +1,3 @@
diff --git a/daemon/Makefile b/daemon/Makefile
index e028e95..1233855 100644
--- a/daemon/Makefile
+++ b/daemon/Makefile
@@ -6,7 +6,7 @@ THISDIR = $(shell pwd)

View File

@@ -8,8 +8,8 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=netdata
PKG_VERSION:=1.29.1
PKG_RELEASE:=1
PKG_VERSION:=1.30.1
PKG_RELEASE:=2
PKG_MAINTAINER:=Josef Schlehofer <pepe.schlehofer@gmail.com>, Daniel Engberg <daniel.engberg.lists@pyret.net>
PKG_LICENSE:=GPL-3.0-or-later
@@ -18,7 +18,7 @@ PKG_CPE_ID:=cpe:/a:my-netdata:netdata
PKG_SOURCE:=$(PKG_NAME)-v$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://codeload.github.com/netdata/netdata/tar.gz/v$(PKG_VERSION)?
PKG_HASH:=d5029b466e801966b7fb483905d61a290cec7c19ec95f96ae2fbff14c723ee37
PKG_HASH:=e05f8b59d283fb2844280455b9481a2f9104730fd77f535312ff2fec40a6bc11
PKG_INSTALL:=1
PKG_BUILD_PARALLEL:=1

View File

@@ -27,3 +27,6 @@
[health]
enabled = no
[plugin:proc:ipc]
shared memory totals = no

View File

@@ -14,7 +14,7 @@ start_service() {
mkdir -m 0755 -p /var/log/netdata
chown nobody /var/log/netdata
procd_open_instance
procd_set_param command $APPBINARY -nd -c $CONFIGFILE
procd_set_param command $APPBINARY -D -c $CONFIGFILE
procd_set_param file $CONFIGFILE
procd_set_param respawn
procd_close_instance

View File

@@ -5,48 +5,41 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=openwisp-config
PKG_SOURCE_VERSION:=0.5.0
PKG_RELEASE:=1
PKG_SOURCE_PROTO:=git
PKG_SOURCE_URL:=https://github.com/openwisp/openwisp-config.git
PKG_MIRROR_HASH:=337a3a9542a0898da9f951256b0d19b6bc87ced98f4ec6dc9646172b551880ef
PKG_MAINTAINER:=Federico Capoano <f.capoano@openwisp.io>
PKG_LICENSE:=GPL3.0-or-later
PKGARCH:=all
PKG_SOURCE_URL:=https://github.com/openwisp/openwisp-config.git
PKG_MIRROR_HASH:=7daa10a9d170e665f33a5555a246b4da2223c2d8d0e8a047edb01701c8886986
PKG_SOURCE_PROTO:=git
PKG_SOURCE_VERSION:=1.0.1
include $(INCLUDE_DIR)/package.mk
define Package/openwisp-config/default
TITLE:=Remote configuration management agent ($(2) variant)
CATEGORY:=Administration
SECTION:=admin
SUBMENU:=openwisp
DEPENDS:=+curl +lua +libuci-lua +luafilesystem +luci-lib-nixio $(3)
VARIANT:=$(1)
PKGARCH:=all
URL:=http://openwisp.org
define Package/openwisp-config
TITLE:=Remote configuration management agent
CATEGORY:=Administration
SECTION:=admin
SUBMENU:=openwisp
DEPENDS:=+curl \
+lua \
+libuci-lua \
+luafilesystem \
+luci-lib-nixio \
+ca-certificates
PKGARCH:=all
URL:=https://openwisp.org
endef
Package/openwisp-config-openssl=$(call Package/openwisp-config/default,openssl,OpenSSL,+ca-certificates +libopenssl)
Package/openwisp-config-mbedtls=$(call Package/openwisp-config/default,mbedtls,mbedTLS,+ca-certificates +libmbedtls)
Package/openwisp-config-wolfssl=$(call Package/openwisp-config/default,wolfssl,WolfSSL,+ca-certificates +libwolfssl)
Package/openwisp-config-nossl=$(call Package/openwisp-config/default,nossl,No SSL)
define Build/Compile
endef
define Package/openwisp-config-$(BUILD_VARIANT)/conffiles
define Package/openwisp-config/conffiles
/etc/config/openwisp
endef
CONFIG_OPENWISP_UCI:=ssl
ifeq ($(BUILD_VARIANT),nossl)
CONFIG_OPENWISP_UCI:=nossl
endif
define Package/openwisp-config-$(BUILD_VARIANT)/install
define Package/openwisp-config/install
$(INSTALL_DIR) \
$(1)/usr/sbin \
$(1)/etc/init.d \
@@ -62,7 +55,7 @@ define Package/openwisp-config-$(BUILD_VARIANT)/install
$(PKG_BUILD_DIR)/openwisp-config/files/openwisp.init \
$(1)/etc/init.d/openwisp_config
$(INSTALL_CONF) $(PKG_BUILD_DIR)/openwisp-config/files/openwisp-$(CONFIG_OPENWISP_UCI).config \
$(INSTALL_CONF) $(PKG_BUILD_DIR)/openwisp-config/files/openwisp.config \
$(1)/etc/config/openwisp
$(INSTALL_BIN) \
@@ -104,7 +97,4 @@ define Package/openwisp-config-$(BUILD_VARIANT)/install
$(CP) $(PKG_BUILD_DIR)/VERSION $(1)/etc/openwisp/
endef
$(eval $(call BuildPackage,openwisp-config-openssl))
$(eval $(call BuildPackage,openwisp-config-mbedtls))
$(eval $(call BuildPackage,openwisp-config-wolfssl))
$(eval $(call BuildPackage,openwisp-config-nossl))
$(eval $(call BuildPackage,openwisp-config))

View File

@@ -0,0 +1,116 @@
# openwisp.org
#
# This is free software, licensed under the GNU General Public License v3.
# See /LICENSE for more information.
include $(TOPDIR)/rules.mk
PKG_NAME:=openwisp-monitoring
PKG_RELEASE:=1
PKG_MAINTAINER:=Federico Capoano <support@openwisp.io>
PKG_LICENSE:=GPL3.0-or-later
PKG_LICENSE_FILES:=LICENSE
PKG_SOURCE_URL:=https://github.com/openwisp/openwrt-openwisp-monitoring.git
PKG_MIRROR_HASH:=ce2ed94d24f68c58320ca700a088471368e1097754be23ad6053842cf0aaa97e
PKG_SOURCE_PROTO:=git
PKG_SOURCE_VERSION:=0.1.1
PKGARCH:=all
include $(INCLUDE_DIR)/package.mk
define Package/openwisp-monitoring
TITLE:=OpenWISP Monitoring agent
CATEGORY:=Administration
SECTION:=admin
SUBMENU:=openwisp
DEPENDS:=+netjson-monitoring +openwisp-config
URL:=http://openwisp.org
endef
define Package/netjson-monitoring
TITLE:=NetJson Monitoring
CATEGORY:=Administration
SECTION:=admin
SUBMENU:=openwisp
DEPENDS:=+libubus-lua +lua-cjson +rpcd +rpcd-mod-iwinfo
URL:=http://openwisp.org
endef
define Build/Compile
endef
define Package/openwisp-monitoring/conffiles
/etc/config/openwisp-monitoring
endef
define Package/netjson-monitoring/install
$(INSTALL_DIR) \
$(1)/usr/sbin \
$(1)/usr/libexec \
$(1)/usr/lib/lua/openwisp-monitoring \
$(1)/etc/openwisp-monitoring
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/sbin/netjson-monitoring.lua \
$(1)/usr/libexec/netjson-monitoring
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/netjson-monitoring \
$(1)/usr/sbin/netjson-monitoring
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/dhcp.lua \
$(1)/usr/lib/lua/openwisp-monitoring/dhcp.lua
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/interfaces.lua \
$(1)/usr/lib/lua/openwisp-monitoring/interfaces.lua
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/monitoring.lua \
$(1)/usr/lib/lua/openwisp-monitoring/monitoring.lua
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/utils.lua \
$(1)/usr/lib/lua/openwisp-monitoring/utils.lua
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/neighbors.lua \
$(1)/usr/lib/lua/openwisp-monitoring/neighbors.lua
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/resources.lua \
$(1)/usr/lib/lua/openwisp-monitoring/resources.lua
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/wifi.lua \
$(1)/usr/lib/lua/openwisp-monitoring/wifi.lua
$(CP) $(PKG_BUILD_DIR)/VERSION $(1)/etc/openwisp-monitoring/
endef
define Package/openwisp-monitoring/install
$(INSTALL_DIR) \
$(1)/usr/sbin \
$(1)/etc/init.d \
$(1)/etc/config \
$(1)/etc/openwisp-monitoring
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/monitoring.agent \
$(1)/usr/sbin/openwisp-monitoring
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/monitoring.init \
$(1)/etc/init.d/openwisp-monitoring
$(INSTALL_CONF) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/monitoring.config \
$(1)/etc/config/openwisp-monitoring
endef
$(eval $(call BuildPackage,openwisp-monitoring))
$(eval $(call BuildPackage,netjson-monitoring))

View File

@@ -2,7 +2,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=schroot
PKG_VERSION:=1.6.10
PKG_RELEASE:=2
PKG_RELEASE:=3
PKG_SOURCE:=$(PKG_NAME)_$(PKG_VERSION).orig.tar.xz
PKG_SOURCE_URL:=http://deb.debian.org/debian/pool/main/s/schroot
@@ -37,7 +37,7 @@ define Package/schroot/description
Securely enter a chroot and run a command or login shell.
endef
define Package/sudo/conffiles
define Package/schroot/conffiles
/etc/schroot/
endef

View File

@@ -1,5 +1,5 @@
--- ./configure.ac-orig 2019-12-09 12:56:45.217308628 +0100
+++ ./configure.ac 2019-12-09 12:57:18.667492923 +0100
--- a/configure.ac
+++ b/configure.ac
@@ -284,22 +284,8 @@ if test -z "$DOXYGEN"; then
HAVE_DOXYGEN="no"
fi
@@ -91,8 +91,8 @@
AC_MSG_CHECKING([for boost::iostreams in -lboost_iostreams])
saved_LIBS="${LIBS}"
--- ./bin/schroot-base/schroot-base-run.h-orig 2019-12-09 04:23:51.881428446 +0100
+++ ./bin/schroot-base/schroot-base-run.h 2019-12-09 04:24:14.934887089 +0100
--- a/bin/schroot-base/schroot-base-run.h
+++ b/bin/schroot-base/schroot-base-run.h
@@ -61,8 +61,8 @@ namespace schroot_base
std::cout.imbue(std::locale());
std::cerr.imbue(std::locale());
@@ -104,8 +104,8 @@
typename options_type::ptr opts(new options_type);
main_type kit(opts);
--- ./sbuild/sbuild-feature.h-orig 2019-12-09 04:23:51.881428446 +0100
+++ ./sbuild/sbuild-feature.h 2019-12-09 04:24:14.934887089 +0100
--- a/sbuild/sbuild-feature.h
+++ b/sbuild/sbuild-feature.h
@@ -24,6 +24,7 @@
#include <string>
@@ -114,8 +114,8 @@
namespace sbuild
{
--- ./etc/setup.d/20copyfiles-orig 2018-11-03 14:26:12.000000000 +0100
+++ ./etc/setup.d/20copyfiles 2019-12-09 13:56:45.277145648 +0100
--- a/etc/setup.d/20copyfiles
+++ b/etc/setup.d/20copyfiles
@@ -39,9 +39,9 @@ copy_file()
if [ -e "$2" ]; then
@@ -128,8 +128,8 @@
if [ "$da" = "$db" ]; then
COPY="false"
--- ./etc/setup.d/20nssdatabases-orig 2018-11-03 14:26:12.000000000 +0100
+++ ./etc/setup.d/20nssdatabases 2019-12-09 13:57:34.397419039 +0100
--- a/etc/setup.d/20nssdatabases
+++ b/etc/setup.d/20nssdatabases
@@ -29,7 +29,7 @@ set -e
dup_nss()
{
@@ -151,47 +151,44 @@
# If the database inside and outside the chroot is the
# same, it's very likely that dup_nss would blank the
diff -X /home/jmarcet/.rsync-filter -pru ./etc/profile-templates/all/all/nssdatabases ./etc/profile-templates/all/all/nssdatabases
--- ./etc/profile-templates/all/all/nssdatabases 2018-11-03 14:26:12.000000000 +0100
+++ ./etc/profile-templates/all/all/nssdatabases 2019-12-09 14:03:12.799297723 +0100
@@ -4,4 +4,4 @@
--- a/etc/profile-templates/all/all/nssdatabases
+++ b/etc/profile-templates/all/all/nssdatabases
@@ -3,5 +3,5 @@
# <database name>
passwd
shadow
-group
-gshadow
+#group
+#gshadow
diff -X /home/jmarcet/.rsync-filter -pru ./etc/profile-templates/buildd/all/nssdatabases ./etc/profile-templates/buildd/all/nssdatabases
--- ./etc/profile-templates/buildd/all/nssdatabases 2018-11-03 14:26:12.000000000 +0100
+++ ./etc/profile-templates/buildd/all/nssdatabases 2019-12-09 14:03:12.802631074 +0100
@@ -4,4 +4,4 @@
--- a/etc/profile-templates/buildd/all/nssdatabases
+++ b/etc/profile-templates/buildd/all/nssdatabases
@@ -3,5 +3,5 @@
# <database name>
passwd
shadow
-group
-gshadow
+#group
+#gshadow
diff -X /home/jmarcet/.rsync-filter -pru ./etc/profile-templates/default/all/nssdatabases ./etc/profile-templates/default/all/nssdatabases
--- ./etc/profile-templates/default/all/nssdatabases 2018-11-03 14:26:12.000000000 +0100
+++ ./etc/profile-templates/default/all/nssdatabases 2019-12-09 14:03:12.809297778 +0100
--- a/etc/profile-templates/default/all/nssdatabases
+++ b/etc/profile-templates/default/all/nssdatabases
@@ -1,4 +1,4 @@
services
protocols
-networks
+#networks
hosts
diff -X /home/jmarcet/.rsync-filter -pru ./etc/profile-templates/desktop/all/nssdatabases ./etc/profile-templates/desktop/all/nssdatabases
--- ./etc/profile-templates/desktop/all/nssdatabases 2018-11-03 14:26:12.000000000 +0100
+++ ./etc/profile-templates/desktop/all/nssdatabases 2019-12-09 14:03:12.812631129 +0100
--- a/etc/profile-templates/desktop/all/nssdatabases
+++ b/etc/profile-templates/desktop/all/nssdatabases
@@ -1,4 +1,4 @@
services
protocols
-networks
+#networks
hosts
diff -X /home/jmarcet/.rsync-filter -pru ./etc/profile-templates/default/linux/fstab ./etc/profile-templates/default/linux/fstab
--- ./etc/profile-templates/default/linux/fstab 2018-11-03 14:26:12.000000000 +0100
+++ ./etc/profile-templates/default/linux/fstab 2019-12-09 14:18:46.970887080 +0100
--- a/etc/profile-templates/default/linux/fstab
+++ b/etc/profile-templates/default/linux/fstab
@@ -7,7 +7,7 @@
# to run additional services in the chroot. However, note that this
# may potentially cause undesirable behaviour on upgrades, such as
@@ -203,9 +200,8 @@ diff -X /home/jmarcet/.rsync-filter -pru ./etc/profile-templates/default/linux/f
-#/run/shm /run/shm none rw,bind 0 0
+/tmp/shm /dev/shm none rw,bind 0 0
+/tmp/shm /run/shm none rw,bind 0 0
diff -X /home/jmarcet/.rsync-filter -pru ./etc/profile-templates/desktop/linux/fstab ./etc/profile-templates/desktop/linux/fstab
--- ./etc/profile-templates/desktop/linux/fstab 2018-11-03 14:26:12.000000000 +0100
+++ ./etc/profile-templates/desktop/linux/fstab 2019-12-09 14:22:14.148555674 +0100
--- a/etc/profile-templates/desktop/linux/fstab
+++ b/etc/profile-templates/desktop/linux/fstab
@@ -12,7 +12,7 @@
# to run additional services in the chroot. However, note that this
# may potentially cause undesirable behaviour on upgrades, such as

View File

@@ -1,6 +1,6 @@
--- a/lib/util/Makefile.in
+++ b/lib/util/Makefile.in
@@ -200,10 +200,10 @@ libsudo_util.la: $(LTOBJS) @LT_LDDEP@
@@ -207,10 +207,10 @@ libsudo_util.la: $(LTOBJS) @LT_LDDEP@
esac
siglist.c: mksiglist

View File

@@ -1,6 +1,6 @@
--- a/Makefile.in
+++ b/Makefile.in
@@ -64,7 +64,7 @@ SHELL = @SHELL@
@@ -73,7 +73,7 @@ SHELL = @SHELL@
SED = @SED@
INSTALL = $(SHELL) $(top_srcdir)/install-sh -c

View File

@@ -1,33 +1,39 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=syslog-ng
PKG_VERSION:=3.30.1
PKG_RELEASE:=1
PKG_VERSION:=4.4.0
PKG_RELEASE:=$(AUTORELEASE)
PKG_MAINTAINER:=Josef Schlehofer <josef.schlehofer@nic.cz>
PKG_MAINTAINER:=Josef Schlehofer <pepe.schlehofer@gmail.com>
PKG_LICENSE:=LGPL-2.1-or-later GPL-2.0-or-later
PKG_LICENSE_FILES:=COPYING LGPL.txt GPL.txt
PKG_CPE_ID:=cpe:/a:balabit:syslog-ng
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://github.com/syslog-ng/syslog-ng/releases/download/$(PKG_NAME)-$(PKG_VERSION)/
PKG_HASH:=44e54a6186af14d01affa06bf7391cfe8fc2460bd4ba211aab5469d8b1ca5b4b
PKG_HASH:=583b147f3ec17fbc2dbbf31aafb1e3966237d7541313de5b41ea885dc16d932e
PKG_BUILD_PARALLEL:=1
PKG_INSTALL:=1
PKG_BUILD_DEPENDS:= \
HOST_OS_MACOS:fakeuname/host \
PKG_CONFIG_DEPENDS:= \
CONFIG_IPV6 \
include $(INCLUDE_DIR)/package.mk
include $(INCLUDE_DIR)/nls.mk
ifeq ($(CONFIG_HOST_OS_MACOS),y)
include ../../utils/fakeuname/fakeuname.mk
endif
define Package/syslog-ng
SECTION:=admin
CATEGORY:=Administration
TITLE:=A powerful syslog daemon
URL:=https://www.syslog-ng.com/products/open-source-log-management/
DEPENDS:=+libpcre +glib2 +libopenssl +libpthread +librt +zlib +libdbi +libjson-c +libcurl +libuuid
DEPENDS:=+libpcre2 +glib2 +libopenssl +libpthread +librt +zlib +libdbi +libjson-c +libcurl +libuuid +SYSLOGNG_LOGROTATE:logrotate
endef
define Package/syslog-ng/description
@@ -42,11 +48,39 @@ define Package/syslog-ng/conffiles
/etc/scl.conf
endef
define Package/syslog-ng/config
config SYSLOGNG_LOGROTATE
bool "Logrotate support"
depends on PACKAGE_syslog-ng
default n
help
It adds support for logrotate functionality.
config SYSLOGNG_LOGROTATE_MAXSIZE
string "Maximum size of /var/log/messages log file"
depends on SYSLOGNG_LOGROTATE
default "1M"
help
Log files are rotated when they grow bigger than defined size bytes.
config SYSLOGNG_LOGROTATE_ROTATE_COUNT
int "Maximum rotation count for /var/log/messages log file"
depends on SYSLOGNG_LOGROTATE
default 1
help
Log files are rotated count times before being removed or mailed to
the address specified in a mail directive. If count is 0, old
versions are removed rather than rotated.
endef
define Build/Configure
$(SED) 's,-I/usr/include,,' $(PKG_BUILD_DIR)/configure
$(Build/Configure/Default)
endef
LOGROTATE_MAXSIZE:=$(call qstrip,$(CONFIG_SYSLOGNG_LOGROTATE_MAXSIZE))
LOGROTATE_ROTATE:=$(call qstrip,$(CONFIG_SYSLOGNG_LOGROTATE_ROTATE_COUNT))
CONFIGURE_ARGS += \
--disable-afsnmp \
$(call autoconf_bool,CONFIG_IPV6,ipv6) \
@@ -55,9 +89,11 @@ CONFIGURE_ARGS += \
--disable-sql \
--disable-linux-caps \
--with-jsonc=system \
--enable-cpp=no \
--enable-json=yes \
--enable-http=yes \
--disable-smtp \
--disable-mqtt \
--disable-redis \
--disable-dependency-tracking \
--disable-python \
@@ -68,6 +104,7 @@ CONFIGURE_ARGS += \
--with-mongoc=no
CONFIGURE_VARS += \
$(if $(CONFIG_HOST_OS_MACOS),PATH=$(FAKEUNAME_PATH):$(PATH)) \
LIBDBI_CFLAGS="-I$(STAGING_DIR)/usr/include"
define Package/syslog-ng/install
@@ -90,6 +127,14 @@ define Package/syslog-ng/install
$(INSTALL_DIR) $(1)/usr/share/syslog-ng/include/
$(CP) -r ./files/scl $(1)/usr/share/syslog-ng/include/
ifneq ($(strip $(CONFIG_SYSLOGNG_LOGROTATE)),)
$(INSTALL_DIR) $(1)/etc/logrotate.d
sed \
-e 's#@MAXSIZE@#$(LOGROTATE_MAXSIZE)#g' \
-e 's#@ROTATE@#$(LOGROTATE_ROTATE)#g' \
./files/syslog-ng.logrotate > $(1)/etc/logrotate.d/syslog-ng.conf
endif
endef
define Package/syslog-ng/postinst

View File

@@ -4,7 +4,7 @@
# More details about these settings can be found here:
# https://www.syslog-ng.com/technical-documents/list/syslog-ng-open-source-edition
@version: 3.30
@version: 4.4
@include "scl.conf"
options {

View File

@@ -0,0 +1,12 @@
/var/log/messages {
compress
copytruncate
delaycompress
notifempty
maxsize @MAXSIZE@
missingok
postrotate
/usr/sbin/syslog-ng-ctl reload > /dev/null
endscript
rotate @ROTATE@
}

View File

@@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=zabbix
PKG_VERSION:=5.0.7
PKG_RELEASE:=1
PKG_RELEASE:=2
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://cdn.zabbix.com/zabbix/sources/stable/5.0/
@@ -24,33 +24,12 @@ PKG_INSTALL:=1
PKG_BUILD_PARALLEL:=1
PKG_CONFIG_DEPENDS:= \
CONFIG_ZABBIX_GNUTLS \
CONFIG_ZABBIX_OPENSSL \
CONFIG_ZABBIX_MYSQL \
CONFIG_ZABBIX_POSTGRESQL
include $(INCLUDE_DIR)/package.mk
include $(INCLUDE_DIR)/nls.mk
define Package/zabbix-agentd/config
comment "SSL support"
choice
prompt "Selected SSL library"
default ZABBIX_NOSSL
config ZABBIX_OPENSSL
bool "OpenSSL"
config ZABBIX_GNUTLS
bool "GnuTLS"
config ZABBIX_NOSSL
bool "No SSL support"
endchoice
endef
define Package/zabbix-server/config
comment "Database Software"
@@ -74,12 +53,31 @@ define Package/zabbix/Default
TITLE:=Zabbix
URL:=https://www.zabbix.com/
USERID:=zabbix=53:zabbix=53
DEPENDS += $(ICONV_DEPENDS) +libpcre +zlib +ZABBIX_GNUTLS:libgnutls +ZABBIX_OPENSSL:libopenssl
DEPENDS+=$(ICONV_DEPENDS) +libpcre +zlib
endef
define Package/zabbix-agentd
$(call Package/zabbix/Default)
TITLE+= agentd
PROVIDES:=zabbix-agentd
VARIANT:=nossl
DEFAULT_VARIANT:=1
endef
define Package/zabbix-agentd-openssl
$(call Package/zabbix/Default)
TITLE+= agentd (with OpenSSL)
DEPENDS+= +libopenssl
PROVIDES:=zabbix-agentd
VARIANT:=openssl
endef
define Package/zabbix-agentd-gnutls
$(call Package/zabbix/Default)
TITLE+= agentd (with GnuTLS)
DEPENDS+= +libgnutls
PROVIDES:=zabbix-agentd
VARIANT:=gnutls
endef
define Package/zabbix-extra-mac80211
@@ -103,19 +101,80 @@ endef
define Package/zabbix-sender
$(call Package/zabbix/Default)
TITLE+= sender
PROVIDES:=zabbix-sender
VARIANT:=nossl
DEFAULT_VARIANT:=1
endef
define Package/zabbix-sender-openssl
$(call Package/zabbix/Default)
TITLE+= sender (with OpenSSL)
DEPENDS+= +libopenssl
PROVIDES:=zabbix-sender
VARIANT:=openssl
endef
define Package/zabbix-sender-gnutls
$(call Package/zabbix/Default)
TITLE+= sender (with GnuTLS)
DEPENDS+= +libgnutls
PROVIDES:=zabbix-sender
VARIANT:=gnutls
endef
define Package/zabbix-get
$(call Package/zabbix/Default)
TITLE+= get
PROVIDES:=zabbix-get
VARIANT:=nossl
DEFAULT_VARIANT:=1
endef
define Package/zabbix-server
define Package/zabbix-get-openssl
$(call Package/zabbix/Default)
TITLE+= get (with OpenSSL)
DEPENDS+= +libopenssl
PROVIDES:=zabbix-get
VARIANT:=openssl
endef
define Package/zabbix-get-gnutls
$(call Package/zabbix/Default)
TITLE+= get (with GnuTLS)
DEPENDS+= +libgnutls
PROVIDES:=zabbix-get
VARIANT:=gnutls
endef
define Package/zabbix-server/Default
$(call Package/zabbix/Default)
TITLE+= server
DEPENDS += +ZABBIX_POSTGRESQL:libpq +ZABBIX_MYSQL:libmariadbclient +libevent2
endef
define Package/zabbix-server
$(call Package/zabbix-server/Default)
PROVIDES:=zabbix-server
VARIANT:=nossl
DEFAULT_VARIANT:=1
endef
define Package/zabbix-server-openssl
$(call Package/zabbix-server/Default)
TITLE+= (with OpenSSL)
PROVIDES:=zabbix-server
DEPENDS+= +libopenssl
VARIANT:=openssl
endef
define Package/zabbix-server-gnutls
$(call Package/zabbix-server/Default)
TITLE+= (with GnuTLS)
PROVIDES:=zabbix-server
DEPENDS+= +libgnutls
VARIANT:=gnutls
endef
define Package/zabbix-server-frontend
$(call Package/zabbix/Default)
TITLE+= server-frontend
@@ -124,12 +183,35 @@ define Package/zabbix-server-frontend
+php7-mod-session +php7-mod-sockets +php7-mod-mbstring +php7-mod-gettext
endef
define Package/zabbix-proxy
define Package/zabbix-proxy/Default
$(call Package/zabbix/Default)
TITLE+= proxy
DEPENDS += +ZABBIX_POSTGRESQL:libpq +ZABBIX_MYSQL:libmariadbclient +libevent2
endef
define Package/zabbix-proxy
$(call Package/zabbix-proxy/Default)
PROVIDES:=zabbix-proxy
VARIANT:=nossl
DEFAULT_VARIANT:=1
endef
define Package/zabbix-proxy-openssl
$(call Package/zabbix-proxy/Default)
TITLE+= (with OpenSSL)
PROVIDES:=zabbix-proxy
DEPENDS+= +libopenssl
VARIANT:=openssl
endef
define Package/zabbix-proxy-gnutls
$(call Package/zabbix-proxy/Default)
TITLE+= (with GnuTLS)
PROVIDES:=zabbix-proxy
DEPENDS+= +libgnutls
VARIANT:=gnutls
endef
define Package/zabbix-extra-mac80211/description
An extra package for zabbix-agentd that adds a discovery rule for mac80211 wifi phy and many userparameters.
It contains an suid helper to allow zabbix-agentd to still run as zabbix user and not as root.
@@ -158,9 +240,15 @@ CONFIGURE_ARGS+= \
$(if $(CONFIG_ZABBIX_POSTGRESQL),--with-postgresql) \
--with-libevent=$(STAGING_DIR)/usr/include/libevent \
--with-libpcre=$(STAGING_DIR)/usr/include \
--with-zlib=$(STAGING_DIR)/usr/include \
$(if $(CONFIG_ZABBIX_GNUTLS),--with-gnutls="$(STAGING_DIR)/usr") \
$(if $(CONFIG_ZABBIX_OPENSSL),--with-openssl="$(STAGING_DIR)/usr")
--with-zlib=$(STAGING_DIR)/usr/include
ifeq ($(BUILD_VARIANT),openssl)
CONFIGURE_ARGS+= --with-openssl="$(STAGING_DIR)/usr"
endif
ifeq ($(BUILD_VARIANT),gnutls)
CONFIGURE_ARGS+= --with-gnutls="$(STAGING_DIR)/usr"
endif
CONFIGURE_VARS += \
ac_cv_header_sys_sysinfo_h=no
@@ -215,12 +303,20 @@ endef
define Package/zabbix-agentd/conffiles
/etc/zabbix_agentd.conf
endef
Package/zabbix-agentd-openssl/conffiles = $(Package/zabbix-agentd/conffiles)
Package/zabbix-agentd-gnutls/conffiles = $(Package/zabbix-agentd/conffiles)
define Package/zabbix-server/conffiles
/etc/zabbix_server.conf
endef
Package/zabbix-server-openssl/conffiles = $(Package/zabbix-server/conffiles)
Package/zabbix-server-gnutls/conffiles = $(Package/zabbix-server/conffiles)
define Package/zabbix-proxy/conffiles
/etc/zabbix_proxy.conf
endef
Package/zabbix-proxy-openssl/conffiles = $(Package/zabbix-proxy/conffiles)
Package/zabbix-proxy-gnutls/conffiles = $(Package/zabbix-proxy/conffiles)
ifdef CONFIG_PACKAGE_zabbix-extra-mac80211
define Build/Prepare/zabbix-extra-mac80211
@@ -249,6 +345,8 @@ define Package/zabbix-agentd/install
$(call Package/zabbix/install/etc,$(1),agentd)
$(call Package/zabbix/install/init.d,$(1),agentd)
endef
Package/zabbix-agentd-openssl/install = $(Package/zabbix-agentd/install)
Package/zabbix-agentd-gnutls/install = $(Package/zabbix-agentd/install)
define Package/zabbix-extra-mac80211/install
$(call Package/zabbix/install/zabbix.conf.d,$(1),mac80211)
@@ -266,7 +364,7 @@ endef
define Package/zabbix-extra-network/postinst
#!/bin/sh
if [ -z "$${IPKG_INSTROOT}" ]; then
killall -HUP ubusd
killall -s HUP ubusd
fi
endef
@@ -279,22 +377,28 @@ endef
define Package/zabbix-extra-wifi/postinst
#!/bin/sh
if [ -z "$${IPKG_INSTROOT}" ]; then
killall -HUP ubusd
killall -s HUP ubusd
fi
endef
define Package/zabbix-sender/install
$(call Package/zabbix/install/bin,$(1),sender)
endef
Package/zabbix-sender-openssl/install = $(Package/zabbix-sender/install)
Package/zabbix-sender-gnutls/install = $(Package/zabbix-sender/install)
define Package/zabbix-get/install
$(call Package/zabbix/install/bin,$(1),get)
endef
Package/zabbix-get-openssl/install = $(Package/zabbix-get/install)
Package/zabbix-get-gnutls/install = $(Package/zabbix-get/install)
define Package/zabbix-server/install
$(call Package/zabbix/install/sbin,$(1),server)
$(call Package/zabbix/install/etc,$(1),server)
endef
Package/zabbix-server-openssl/install = $(Package/zabbix-server/install)
Package/zabbix-server-gnutls/install = $(Package/zabbix-server/install)
define Package/zabbix-server-frontend/install
$(INSTALL_DIR) $(1)/www/zabbix
@@ -305,13 +409,25 @@ define Package/zabbix-proxy/install
$(call Package/zabbix/install/sbin,$(1),proxy)
$(call Package/zabbix/install/etc,$(1),proxy)
endef
Package/zabbix-proxy-openssl/install = $(Package/zabbix-proxy/install)
Package/zabbix-proxy-gnutls/install = $(Package/zabbix-proxy/install)
$(eval $(call BuildPackage,zabbix-agentd))
$(eval $(call BuildPackage,zabbix-agentd-openssl))
$(eval $(call BuildPackage,zabbix-agentd-gnutls))
$(eval $(call BuildPackage,zabbix-extra-mac80211))
$(eval $(call BuildPackage,zabbix-extra-network))
$(eval $(call BuildPackage,zabbix-extra-wifi))
$(eval $(call BuildPackage,zabbix-sender))
$(eval $(call BuildPackage,zabbix-sender-openssl))
$(eval $(call BuildPackage,zabbix-sender-gnutls))
$(eval $(call BuildPackage,zabbix-server))
$(eval $(call BuildPackage,zabbix-server-openssl))
$(eval $(call BuildPackage,zabbix-server-gnutls))
$(eval $(call BuildPackage,zabbix-server-frontend))
$(eval $(call BuildPackage,zabbix-proxy))
$(eval $(call BuildPackage,zabbix-proxy-openssl))
$(eval $(call BuildPackage,zabbix-proxy-gnutls))
$(eval $(call BuildPackage,zabbix-get))
$(eval $(call BuildPackage,zabbix-get-openssl))
$(eval $(call BuildPackage,zabbix-get-gnutls))

View File

@@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=autoconf
PKG_VERSION:=2.70
PKG_RELEASE:=1
PKG_RELEASE:=2
PKG_SOURCE_URL:=@GNU/autoconf
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
@@ -39,9 +39,12 @@ endef
CONFIGURE_VARS += M4=m4 EMACS=no
FIX_PATHS = $(SED) '1c \#!/usr/bin/perl' -e 's| /[^ ]*/bin/perl| /usr/bin/perl|g'
define Package/autoconf/install
$(INSTALL_DIR) $(1)/usr/bin
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/* $(1)/usr/bin/
grep -rEl "#\!.*perl" $(1)/usr/bin/ | xargs $(FIX_PATHS)
$(INSTALL_DIR) $(1)/usr/share/autoconf
$(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/share/autoconf/INSTALL \
$(1)/usr/share/autoconf/

8
devel/autoconf/test.sh Normal file
View File

@@ -0,0 +1,8 @@
#!/bin/sh
autoconf --version | grep $2 && \
autoheader --version | grep $2 && \
autom4te --version | grep $2 && \
autoreconf --version | grep $2 && \
autoscan --version | grep $2 && \
autoupdate --version | grep $2 && \
ifnames --version | grep $2

48
devel/delve/Makefile Normal file
View File

@@ -0,0 +1,48 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=delve
PKG_VERSION:=1.8.2
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://codeload.github.com/go-delve/delve/tar.gz/v$(PKG_VERSION)?
PKG_HASH:=fbf6ea7e1ed0c92e543c7f5f2343928e185e11e4cba1c7c9d3bfc28d1c323900
PKG_LICENSE:=MIT
PKG_LICENSE_FILES:=LICENSE
PKG_MAINTAINER:=Niels Widger <niels@qacafe.com>
PKG_BUILD_DEPENDS:=golang/host
PKG_BUILD_PARALLEL:=1
PKG_USE_MIPS16:=0
GO_PKG:=github.com/go-delve/delve/
GO_PKG_BUILD_PKG:=github.com/go-delve/delve/cmd/dlv/
GO_PKG_LDFLAGS_X:=main.Build=$(PKG_VERSION)
include $(INCLUDE_DIR)/package.mk
include ../../lang/golang/golang-package.mk
# this is a subset of $(GO_ARCH_DEPENDS) as delve does not support all
# architectures, see build constraints in
# https://github.com/go-delve/delve/blob/v$(PKG_VERSION)/pkg/proc/native/support_sentinel.go
DELVE_GO_ARCH_DEPENDS:=@(aarch64||i386||x86_64)
define Package/delve
SECTION:=devel
CATEGORY:=Development
TITLE:=Debugger for the Go programming language
URL:=https://github.com/go-delve/delve
DEPENDS:=$(DELVE_GO_ARCH_DEPENDS)
endef
define Package/delve/description
Delve is a debugger for the Go programming language. The goal of the
project is to provide a simple, full featured debugging tool for Go.
Delve should be easy to invoke and easy to use. Chances are if you're
using a debugger, things aren't going your way. With that in mind,
Delve should stay out of your way as much as possible.
endef
$(eval $(call GoBinPackage,delve))
$(eval $(call BuildPackage,delve))

View File

@@ -1,16 +1,54 @@
#
# Copyright (C) 2008 OpenWrt.org
# Copyright (C) 2002-2003 Erik Andersen <andersen@uclibc.org>
# Copyright (C) 2004 Manuel Novoa III <mjn3@uclibc.org>
# Copyright (C) 2005-2006 Felix Fietkau <nbd@nbd.name>
# Copyright (C) 2006-2014 OpenWrt.org
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
# General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
include $(TOPDIR)/rules.mk
define Package/gcc/description
Build a native toolchain for compiling on target
device.
endef
PKG_NAME:=gcc
GCC_VERSION:=$(call qstrip,$(CONFIG_GCC_VERSION))
PKG_VERSION:=$(firstword $(subst +, ,$(GCC_VERSION)))
PKG_RELEASE:=$(AUTORELEASE)
GCC_DIR:=$(PKG_NAME)-$(PKG_VERSION)
PKG_SOURCE_URL:=@GNU/gcc/gcc-$(PKG_VERSION)
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
PKG_INSTALL:=1
PKG_FIXUP:=libtool
PKG_BUILD_PARALLEL:=1
PKG_CPE_ID:=cpe:/a:gnu:gcc
ifeq ($(PKG_VERSION),8.4.0)
PKG_HASH:=e30a6e52d10e1f27ed55104ad233c30bd1e99cfb5ff98ab022dc941edd1b2dd4
endif
ifeq ($(PKG_VERSION),9.3.0)
PKG_HASH:=71e197867611f6054aa1119b13a0c0abac12834765fe2d81f35ac57f84f742d1
endif
ifeq ($(PKG_VERSION),10.2.0)
PKG_HASH:=b8dd4368bb9c7f0b98188317ee0254dd8cc99d1e3a18d0ff146c855fe16c1d8c
endif
PATCH_DIR=./patches/$(GCC_VERSION)
include $(INCLUDE_DIR)/package.mk
define Package/gcc
SECTION:=devel
@@ -21,26 +59,6 @@ define Package/gcc
MENU:=1
endef
PKG_NAME:=gcc
# PKG_VERSION=7.3.0
PKG_VERSION=7.4.0
PKG_RELEASE:=5
PKG_SOURCE_URL:=@GNU/gcc/gcc-$(PKG_VERSION)
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
PKG_INSTALL:=1
PKG_FIXUP:=libtool
PKG_BUILD_PARALLEL:=1
PKG_CPE_ID:=cpe:/a:gnu:gcc
ifeq ($(PKG_VERSION),7.3.0)
PKG_HASH:=832ca6ae04636adbb430e865a1451adf6979ab44ca1c8374f61fba65645ce15c
endif
ifeq ($(PKG_VERSION),7.4.0)
PKG_HASH:=eddde28d04f334aec1604456e536416549e9b1aa137fc69204e65eb0c009fe51
endif
define Package/gcc/config
source "$(SOURCE)/Config.in"
endef
@@ -62,13 +80,12 @@ ifeq ($(CONFIG_INCLUDE_STATIC_LINK_SPEC),y)
REMOVE_STATIC_SPEC=rm /usr/lib/$(PKG_NAME)/$(REAL_GNU_TARGET_NAME)/$(PKG_VERSION)/specs
endif
include $(INCLUDE_DIR)/package.mk
TARGET_LANGUAGES:="c,c++"
BUGURL=https://dev.openwrt.org/
PKGVERSION=OpenWrt GCC $(PKG_VERSION)
TARGET_CPPFLAGS += -D_GLIBCXX_INCLUDE_NEXT_C_HEADERS
# not using sstrip here as this fucks up the .so's somehow
# not using sstrip here as this messes up the .so's somehow
STRIP:=$(TOOLCHAIN_DIR)/bin/$(TARGET_CROSS)strip
RSTRIP:= \
NM="$(TOOLCHAIN_DIR)/bin/$(TARGET_CROSS)nm" \
@@ -81,6 +98,7 @@ ifneq ($(CONFIG_SOFT_FLOAT),y)
ARM_FLOAT_OPTION:= --with-float=hard
endif
endif
GMPSRC=gmp-6.1.0
define Download/gmp
@@ -110,7 +128,7 @@ $(eval $(call Download,mpfr))
define Build/Prepare
$(PKG_UNPACK)
# we have to download and unpack additional stuff before patching
# we have to download and unpack additional stuff before patching
tar -C $(PKG_BUILD_DIR) -xvjf $(DL_DIR)/$(GMPSRC).tar.bz2
ln -sf $(PKG_BUILD_DIR)/$(GMPSRC) $(PKG_BUILD_DIR)/gmp
tar -C $(PKG_BUILD_DIR) -xvzf $(DL_DIR)/$(MPCSRC).tar.gz
@@ -125,7 +143,7 @@ define Build/Prepare
cp $(PKG_BUILD_DIR)/config.sub $(PKG_BUILD_DIR)/mpc/
endef
CONFIGURE_ARGS += CXXFLAGS_FOR_TARGET="-g -O2 -D_GLIBCXX_INCLUDE_NEXT_C_HEADERS"
CONFIGURE_ARGS += CXXFLAGS_FOR_TARGET="-g -O2 -D_GLIBCXX_INCLUDE_NEXT_C_HEADERS"
define Build/Configure
(cd $(PKG_BUILD_DIR); rm -f config.cache; \
@@ -168,8 +186,10 @@ define Build/Configure
endef
define Build/Compile
export SHELL="$(BASH)"; $(MAKE_VARS) $(MAKE) -C $(PKG_BUILD_DIR) \
DESTDIR="$(PKG_INSTALL_DIR)" $(MAKE_ARGS) all install
export SHELL="$(BASH)"; $(MAKE_VARS) $(MAKE) $(PKG_JOBS) -C $(PKG_BUILD_DIR) \
DESTDIR="$(PKG_INSTALL_DIR)" $(MAKE_ARGS) all
export SHELL="$(BASH)"; $(MAKE_VARS) $(MAKE) $(PKG_JOBS) -C $(PKG_BUILD_DIR) \
DESTDIR="$(PKG_INSTALL_DIR)" $(MAKE_ARGS) install
endef
ENVCFLAGS:="$(TARGET_OPTIMIZATION) $(EXTRA_OPTIMIZATION)
@@ -192,6 +212,7 @@ define Package/gcc/install
ln -s $(REAL_GNU_TARGET_NAME)-g++ $(1)/usr/bin/g++
ln -s $(REAL_GNU_TARGET_NAME)-g++ $(1)/usr/bin/$(REAL_GNU_TARGET_NAME)-c++
ln -s $(REAL_GNU_TARGET_NAME)-gcc $(1)/usr/bin/gcc
ln -s $(REAL_GNU_TARGET_NAME)-gcc $(1)/usr/bin/cc
ln -s $(REAL_GNU_TARGET_NAME)-gcc $(1)/usr/bin/$(REAL_GNU_TARGET_NAME)-gcc-$(PKG_VERSION)
cp -ar $(PKG_INSTALL_DIR)/usr/lib/gcc $(1)/usr/lib
cp -ar $(TOOLCHAIN_DIR)/include $(1)/usr

View File

@@ -1,77 +0,0 @@
commit 31285a20390a5e53a74a2a71d1b5c82f366ddd5a
Author: Felix Fietkau <nbd@openwrt.org>
Date: Tue May 6 11:49:05 2014 +0000
gcc: revert an upstream patch that is causing a regression on powerpc
https://forum.openwrt.org/viewtopic.php?pid=232494#p232494
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 40709
Revert of:
commit 275035b56823b26d5fb7e90fad945b998648edf2
Author: bergner <bergner@138bc75d-0d04-0410-961f-82ee72b054a4>
Date: Thu Sep 5 14:09:07 2013 +0000
PR target/58139
* reginfo.c (choose_hard_reg_mode): Scan through all mode classes
looking for widest mode.
git-svn-id: svn+ssh://gcc.gnu.org/svn/gcc/trunk@202286 138bc75d-0d04-0410-961f-82ee72b054a4
--- a/gcc/reginfo.c
+++ b/gcc/reginfo.c
@@ -637,35 +637,40 @@ choose_hard_reg_mode (unsigned int regno
mode = GET_MODE_WIDER_MODE (mode))
if ((unsigned) hard_regno_nregs[regno][mode] == nregs
&& HARD_REGNO_MODE_OK (regno, mode)
- && (! call_saved || ! HARD_REGNO_CALL_PART_CLOBBERED (regno, mode))
- && GET_MODE_SIZE (mode) > GET_MODE_SIZE (found_mode))
+ && (! call_saved || ! HARD_REGNO_CALL_PART_CLOBBERED (regno, mode)))
found_mode = mode;
+ if (found_mode != VOIDmode)
+ return found_mode;
+
for (mode = GET_CLASS_NARROWEST_MODE (MODE_FLOAT);
mode != VOIDmode;
mode = GET_MODE_WIDER_MODE (mode))
if ((unsigned) hard_regno_nregs[regno][mode] == nregs
&& HARD_REGNO_MODE_OK (regno, mode)
- && (! call_saved || ! HARD_REGNO_CALL_PART_CLOBBERED (regno, mode))
- && GET_MODE_SIZE (mode) > GET_MODE_SIZE (found_mode))
+ && (! call_saved || ! HARD_REGNO_CALL_PART_CLOBBERED (regno, mode)))
found_mode = mode;
+ if (found_mode != VOIDmode)
+ return found_mode;
+
for (mode = GET_CLASS_NARROWEST_MODE (MODE_VECTOR_FLOAT);
mode != VOIDmode;
mode = GET_MODE_WIDER_MODE (mode))
if ((unsigned) hard_regno_nregs[regno][mode] == nregs
&& HARD_REGNO_MODE_OK (regno, mode)
- && (! call_saved || ! HARD_REGNO_CALL_PART_CLOBBERED (regno, mode))
- && GET_MODE_SIZE (mode) > GET_MODE_SIZE (found_mode))
+ && (! call_saved || ! HARD_REGNO_CALL_PART_CLOBBERED (regno, mode)))
found_mode = mode;
+ if (found_mode != VOIDmode)
+ return found_mode;
+
for (mode = GET_CLASS_NARROWEST_MODE (MODE_VECTOR_INT);
mode != VOIDmode;
mode = GET_MODE_WIDER_MODE (mode))
if ((unsigned) hard_regno_nregs[regno][mode] == nregs
&& HARD_REGNO_MODE_OK (regno, mode)
- && (! call_saved || ! HARD_REGNO_CALL_PART_CLOBBERED (regno, mode))
- && GET_MODE_SIZE (mode) > GET_MODE_SIZE (found_mode))
+ && (! call_saved || ! HARD_REGNO_CALL_PART_CLOBBERED (regno, mode)))
found_mode = mode;
if (found_mode != VOIDmode)

View File

@@ -1,46 +0,0 @@
@@ -0,0 +1,45 @@
diff --git a/gcc/configure b/gcc/configure
index 3793681..bcda752 100755
--- a/gcc/configure
+++ b/gcc/configure
@@ -26876,19 +26876,6 @@ $as_echo "#define TARGET_LIBC_PROVIDES_SSP 1" >>confdefs.h
fi
-# Test for <sys/sdt.h> on the target.
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking sys/sdt.h in the target C library" >&5
-$as_echo_n "checking sys/sdt.h in the target C library... " >&6; }
-have_sys_sdt_h=no
-if test -f $target_header_dir/sys/sdt.h; then
- have_sys_sdt_h=yes
-
-$as_echo "#define HAVE_SYS_SDT_H 1" >>confdefs.h
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $have_sys_sdt_h" >&5
-$as_echo "$have_sys_sdt_h" >&6; }
# Check if TFmode long double should be used by default or not.
# Some glibc targets used DFmode long double, but with glibc 2.4
diff --git a/gcc/configure.ac b/gcc/configure.ac
index 3ee1d67..e321218 100644
--- a/gcc/configure.ac
+++ b/gcc/configure.ac
@@ -4796,16 +4796,6 @@ if test x$gcc_cv_libc_provides_ssp = xyes; then
[Define if your target C library provides stack protector support])
fi
-# Test for <sys/sdt.h> on the target.
-GCC_TARGET_TEMPLATE([HAVE_SYS_SDT_H])
-AC_MSG_CHECKING(sys/sdt.h in the target C library)
-have_sys_sdt_h=no
-if test -f $target_header_dir/sys/sdt.h; then
- have_sys_sdt_h=yes
- AC_DEFINE(HAVE_SYS_SDT_H, 1,
- [Define if your target C library provides sys/sdt.h])
-fi
-AC_MSG_RESULT($have_sys_sdt_h)
# Check if TFmode long double should be used by default or not.
# Some glibc targets used DFmode long double, but with glibc 2.4

View File

@@ -0,0 +1,24 @@
commit 81cc26c706b2bc8c8c1eb1a322e5c5157900836e
Author: Felix Fietkau <nbd@openwrt.org>
Date: Sun Oct 19 21:45:51 2014 +0000
gcc: do not assume that the Mac OS X filesystem is case insensitive
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 42973
--- a/include/filenames.h
+++ b/include/filenames.h
@@ -44,11 +44,6 @@ extern "C" {
# define IS_DIR_SEPARATOR(c) IS_DOS_DIR_SEPARATOR (c)
# define IS_ABSOLUTE_PATH(f) IS_DOS_ABSOLUTE_PATH (f)
#else /* not DOSish */
-# if defined(__APPLE__)
-# ifndef HAVE_CASE_INSENSITIVE_FILE_SYSTEM
-# define HAVE_CASE_INSENSITIVE_FILE_SYSTEM 1
-# endif
-# endif /* __APPLE__ */
# define HAS_DRIVE_SPEC(f) (0)
# define IS_DIR_SEPARATOR(c) IS_UNIX_DIR_SEPARATOR (c)
# define IS_ABSOLUTE_PATH(f) IS_UNIX_ABSOLUTE_PATH (f)

View File

@@ -12,7 +12,7 @@ Date: Tue Feb 26 16:16:33 2013 +0000
--- a/gcc/Makefile.in
+++ b/gcc/Makefile.in
@@ -3121,18 +3121,10 @@ doc/gcc.info: $(TEXI_GCC_FILES)
@@ -3285,18 +3285,10 @@ doc/gcc.info: $(TEXI_GCC_FILES)
doc/gccint.info: $(TEXI_GCCINT_FILES)
doc/cppinternals.info: $(TEXI_CPPINT_FILES)

View File

@@ -5,7 +5,7 @@ instructions.
--- a/gcc/config/mips/mips.c
+++ b/gcc/config/mips/mips.c
@@ -3098,6 +3098,12 @@ mips_emit_call_insn (rtx pattern, rtx or
@@ -3132,6 +3132,12 @@ mips_emit_call_insn (rtx pattern, rtx or
emit_insn (gen_update_got_version ());
}

View File

@@ -0,0 +1,13 @@
--- a/gcc/gcc.c
+++ b/gcc/gcc.c
@@ -875,7 +875,9 @@ proper position among the other output f
#endif
#ifndef LINK_SSP_SPEC
-#ifdef TARGET_LIBC_PROVIDES_SSP
+#if DEFAULT_LIBC == LIBC_MUSL
+#define LINK_SSP_SPEC "-lssp_nonshared"
+#elif defined(TARGET_LIBC_PROVIDES_SSP)
#define LINK_SSP_SPEC "%{fstack-protector|fstack-protector-all" \
"|fstack-protector-strong|fstack-protector-explicit:}"
#else

View File

@@ -10,7 +10,7 @@ Signed-off-by: Felix Fietkau <nbd@nbd.name>
--- a/gcc/config/mips/mips.c
+++ b/gcc/config/mips/mips.c
@@ -19790,7 +19790,7 @@ mips_option_override (void)
@@ -20041,7 +20041,7 @@ mips_option_override (void)
flag_pcc_struct_return = 0;
/* Decide which rtx_costs structure to use. */

View File

@@ -8,7 +8,7 @@ Date: Mon Oct 19 23:26:09 2009 +0000
--- a/libgcc/Makefile.in
+++ b/libgcc/Makefile.in
@@ -920,11 +920,12 @@ $(libgcov-driver-objects): %$(objext): $
@@ -929,11 +929,12 @@ $(libgcov-driver-objects): %$(objext): $
# Static libraries.
libgcc.a: $(libgcc-objects)
@@ -22,7 +22,7 @@ Date: Mon Oct 19 23:26:09 2009 +0000
-rm -f $@
objects="$(objects)"; \
@@ -945,7 +946,7 @@ all: libunwind.a
@@ -957,7 +958,7 @@ all: libunwind.a
endif
ifeq ($(enable_shared),yes)
@@ -31,7 +31,7 @@ Date: Mon Oct 19 23:26:09 2009 +0000
ifneq ($(LIBUNWIND),)
all: libunwind$(SHLIB_EXT)
libgcc_s$(SHLIB_EXT): libunwind$(SHLIB_EXT)
@@ -1151,6 +1152,10 @@ install-shared:
@@ -1163,6 +1164,10 @@ install-shared:
chmod 644 $(DESTDIR)$(inst_libdir)/libgcc_eh.a
$(RANLIB) $(DESTDIR)$(inst_libdir)/libgcc_eh.a

View File

@@ -0,0 +1,28 @@
commit 7edc8ca5456d9743dd0075eb3cc5b04f4f24c8cc
Author: Imre Kaloz <kaloz@openwrt.org>
Date: Wed Feb 2 19:34:36 2011 +0000
add armv4 fixup patches
SVN-Revision: 25322
--- a/gcc/config/arm/linux-eabi.h
+++ b/gcc/config/arm/linux-eabi.h
@@ -91,10 +91,15 @@
#define MUSL_DYNAMIC_LINKER \
"/lib/ld-musl-arm" MUSL_DYNAMIC_LINKER_E "%{mfloat-abi=hard:hf}%{mfdpic:-fdpic}.so.1"
+/* For armv4 we pass --fix-v4bx to linker to support EABI */
+#undef TARGET_FIX_V4BX_SPEC
+#define TARGET_FIX_V4BX_SPEC " %{mcpu=arm8|mcpu=arm810|mcpu=strongarm*"\
+ "|march=armv4|mcpu=fa526|mcpu=fa626:--fix-v4bx}"
+
/* At this point, bpabi.h will have clobbered LINK_SPEC. We want to
use the GNU/Linux version, not the generic BPABI version. */
#undef LINK_SPEC
-#define LINK_SPEC EABI_LINK_SPEC \
+#define LINK_SPEC EABI_LINK_SPEC TARGET_FIX_V4BX_SPEC \
LINUX_OR_ANDROID_LD (LINUX_TARGET_LINK_SPEC, \
LINUX_TARGET_LINK_SPEC " " ANDROID_LINK_SPEC)

View File

@@ -0,0 +1,54 @@
commit dcfc40358b5a3cae7320c17f8d1cebd5ad5540cd
Author: Felix Fietkau <nbd@openwrt.org>
Date: Sun Feb 12 20:25:47 2012 +0000
gcc 4.6: port over the missing patch 850-use_shared_libgcc.patch to prevent libgcc crap from leaking into every single binary
SVN-Revision: 30486
--- a/gcc/config/arm/linux-eabi.h
+++ b/gcc/config/arm/linux-eabi.h
@@ -132,10 +132,6 @@
"%{Ofast|ffast-math|funsafe-math-optimizations:crtfastmath.o%s} " \
LINUX_OR_ANDROID_LD (GNU_USER_TARGET_ENDFILE_SPEC, ANDROID_ENDFILE_SPEC)
-/* Use the default LIBGCC_SPEC, not the version in linux-elf.h, as we
- do not use -lfloat. */
-#undef LIBGCC_SPEC
-
/* Clear the instruction cache from `beg' to `end'. This is
implemented in lib1funcs.S, so ensure an error if this definition
is used. */
--- a/gcc/config/linux.h
+++ b/gcc/config/linux.h
@@ -66,6 +66,10 @@ see the files COPYING3 and COPYING.RUNTI
builtin_version ("CRuntime_Musl"); \
} while (0)
+#ifndef LIBGCC_SPEC
+#define LIBGCC_SPEC "%{static|static-libgcc:-lgcc}%{!static:%{!static-libgcc:-lgcc_s}}"
+#endif
+
/* Determine which dynamic linker to use depending on whether GLIBC or
uClibc or Bionic or musl is the default C library and whether
-muclibc or -mglibc or -mbionic or -mmusl has been passed to change
--- a/libgcc/mkmap-symver.awk
+++ b/libgcc/mkmap-symver.awk
@@ -136,5 +136,5 @@ function output(lib) {
else if (inherit[lib])
printf("} %s;\n", inherit[lib]);
else
- printf ("\n local:\n\t*;\n};\n");
+ printf ("\n\t*;\n};\n");
}
--- a/gcc/config/rs6000/linux.h
+++ b/gcc/config/rs6000/linux.h
@@ -62,6 +62,9 @@
#undef CPP_OS_DEFAULT_SPEC
#define CPP_OS_DEFAULT_SPEC "%(cpp_os_linux)"
+#undef LIBGCC_SPEC
+#define LIBGCC_SPEC "%{!static:%{!static-libgcc:-lgcc_s}} -lgcc"
+
#undef LINK_SHLIB_SPEC
#define LINK_SHLIB_SPEC "%{shared:-shared} %{!shared: %{static:-static}} \
%{static-pie:-static -pie --no-dynamic-linker -z text}"

View File

@@ -0,0 +1,11 @@
--- a/gcc/config/rs6000/rs6000-logue.c
+++ b/gcc/config/rs6000/rs6000-logue.c
@@ -348,7 +348,7 @@ rs6000_savres_strategy (rs6000_stack_t *
/* Define cutoff for using out-of-line functions to save registers. */
if (DEFAULT_ABI == ABI_V4 || TARGET_ELF)
{
- if (!optimize_size)
+ if (1)
{
strategy |= SAVE_INLINE_FPRS | REST_INLINE_FPRS;
strategy |= SAVE_INLINE_GPRS | REST_INLINE_GPRS;

View File

@@ -0,0 +1,11 @@
--- a/libgcc/crtstuff.c
+++ b/libgcc/crtstuff.c
@@ -152,7 +152,7 @@ call_ ## FUNC (void) \
#endif
#if !defined(USE_TM_CLONE_REGISTRY) && defined(OBJECT_FORMAT_ELF)
-# define USE_TM_CLONE_REGISTRY 1
+# define USE_TM_CLONE_REGISTRY 0
#elif !defined(USE_TM_CLONE_REGISTRY)
# define USE_TM_CLONE_REGISTRY 0
#endif

View File

@@ -0,0 +1,9 @@
--- a/libgcc/config/mips/t-mips16
+++ b/libgcc/config/mips/t-mips16
@@ -43,3 +43,6 @@ SYNC_CFLAGS = -mno-mips16
# Version these symbols if building libgcc.so.
SHLIB_MAPFILES += $(srcdir)/config/mips/libgcc-mips16.ver
+
+CRTSTUFF_T_CFLAGS += -mno-mips16
+CRTSTUFF_T_CFLAGS_S += -mno-mips16

View File

@@ -0,0 +1,146 @@
commit 99368862e44740ff4fd33760893f04e14f9dbdf1
Author: Felix Fietkau <nbd@openwrt.org>
Date: Tue Jul 31 00:52:27 2007 +0000
Port the mbsd_multi patch from freewrt, which adds -fhonour-copts. This will emit warnings in packages that don't use our target cflags properly
SVN-Revision: 8256
This patch brings over a feature from MirBSD:
* -fhonour-copts
If this option is not given, it's warned (depending
on environment variables). This is to catch errors
of misbuilt packages which override CFLAGS themselves.
This patch was authored by Thorsten Glaser <tg at mirbsd.de>
with copyright assignment to the FSF in effect.
--- a/gcc/c-family/c-opts.c
+++ b/gcc/c-family/c-opts.c
@@ -107,6 +107,9 @@ static dump_flags_t original_dump_flags;
/* Whether any standard preincluded header has been preincluded. */
static bool done_preinclude;
+/* Check if a port honours COPTS. */
+static int honour_copts = 0;
+
static void handle_OPT_d (const char *);
static void set_std_cxx98 (int);
static void set_std_cxx11 (int);
@@ -455,6 +458,12 @@ c_common_handle_option (size_t scode, co
flag_no_builtin = !value;
break;
+ case OPT_fhonour_copts:
+ if (c_language == clk_c) {
+ honour_copts++;
+ }
+ break;
+
case OPT_fconstant_string_class_:
constant_string_class_name = arg;
break;
@@ -1168,6 +1177,47 @@ c_common_init (void)
return false;
}
+ if (c_language == clk_c) {
+ char *ev = getenv ("GCC_HONOUR_COPTS");
+ int evv;
+ if (ev == NULL)
+ evv = -1;
+ else if ((*ev == '0') || (*ev == '\0'))
+ evv = 0;
+ else if (*ev == '1')
+ evv = 1;
+ else if (*ev == '2')
+ evv = 2;
+ else if (*ev == 's')
+ evv = -1;
+ else {
+ warning (0, "unknown GCC_HONOUR_COPTS value, assuming 1");
+ evv = 1; /* maybe depend this on something like MIRBSD_NATIVE? */
+ }
+ if (evv == 1) {
+ if (honour_copts == 0) {
+ error ("someone does not honour COPTS at all in lenient mode");
+ return false;
+ } else if (honour_copts != 1) {
+ warning (0, "someone does not honour COPTS correctly, passed %d times",
+ honour_copts);
+ }
+ } else if (evv == 2) {
+ if (honour_copts == 0) {
+ error ("someone does not honour COPTS at all in strict mode");
+ return false;
+ } else if (honour_copts != 1) {
+ error ("someone does not honour COPTS correctly, passed %d times",
+ honour_copts);
+ return false;
+ }
+ } else if (evv == 0) {
+ if (honour_copts != 1)
+ inform (UNKNOWN_LOCATION, "someone does not honour COPTS correctly, passed %d times",
+ honour_copts);
+ }
+ }
+
return true;
}
--- a/gcc/c-family/c.opt
+++ b/gcc/c-family/c.opt
@@ -1590,6 +1590,9 @@ C++ ObjC++ Optimization Alias(fexception
fhonor-std
C++ ObjC++ WarnRemoved
+fhonour-copts
+C ObjC C++ ObjC++ RejectNegative
+
fhosted
C ObjC
Assume normal C execution environment.
--- a/gcc/common.opt
+++ b/gcc/common.opt
@@ -1657,6 +1657,9 @@ fguess-branch-probability
Common Report Var(flag_guess_branch_prob) Optimization
Enable guessing of branch probabilities.
+fhonour-copts
+Common RejectNegative
+
; Nonzero means ignore `#ident' directives. 0 means handle them.
; Generate position-independent code for executables if possible
; On SVR4 targets, it also controls whether or not to emit a
--- a/gcc/doc/invoke.texi
+++ b/gcc/doc/invoke.texi
@@ -8169,6 +8169,17 @@ This option is only supported for C and
@option{-Wall} and by @option{-Wpedantic}, which can be disabled with
@option{-Wno-pointer-sign}.
+@item -fhonour-copts
+@opindex fhonour-copts
+If @env{GCC_HONOUR_COPTS} is set to 1, abort if this option is not
+given at least once, and warn if it is given more than once.
+If @env{GCC_HONOUR_COPTS} is set to 2, abort if this option is not
+given exactly once.
+If @env{GCC_HONOUR_COPTS} is set to 0 or unset, warn if this option
+is not given exactly once.
+The warning is quelled if @env{GCC_HONOUR_COPTS} is set to @samp{s}.
+This flag and environment variable only affect the C language.
+
@item -Wstack-protector
@opindex Wstack-protector
@opindex Wno-stack-protector
--- a/gcc/opts.c
+++ b/gcc/opts.c
@@ -2308,6 +2308,9 @@ common_handle_option (struct gcc_options
/* Currently handled in a prescan. */
break;
+ case OPT_fhonour_copts:
+ break;
+
case OPT_Werror:
dc->warning_as_error_requested = value;
break;

View File

@@ -0,0 +1,22 @@
Author: Jo-Philipp Wich <jow@openwrt.org>
Date: Sat Apr 21 03:02:39 2012 +0000
gcc: add patch to make the getenv() spec function nonfatal if requested environment variable is unset
SVN-Revision: 31390
--- a/gcc/gcc.c
+++ b/gcc/gcc.c
@@ -9396,8 +9396,10 @@ getenv_spec_function (int argc, const ch
}
if (!value)
- fatal_error (input_location,
- "environment variable %qs not defined", varname);
+ {
+ warning (input_location, "environment variable %qs not defined", varname);
+ value = "";
+ }
/* We have to escape every character of the environment variable so
they are not interpreted as active spec characters. A

View File

@@ -0,0 +1,111 @@
From da45b3fde60095756f5f6030f6012c23a3d34429 Mon Sep 17 00:00:00 2001
From: Andrew McDonnell <bugs@andrewmcdonnell.net>
Date: Fri, 3 Oct 2014 19:09:00 +0930
Subject: Add .note.GNU-stack section
See http://lists.busybox.net/pipermail/uclibc/2014-October/048671.html
Below copied from https://gcc.gnu.org/ml/gcc-patches/2014-09/msg02430.html
Re: [Patch, MIPS] Add .note.GNU-stack section
From: Steve Ellcey <sellcey at mips dot com>
On Wed, 2014-09-10 at 10:15 -0700, Eric Christopher wrote:
>
>
> On Wed, Sep 10, 2014 at 9:27 AM, <pinskia@gmail.com> wrote:
> This works except you did not update the assembly files in
> libgcc or glibc. We (Cavium) have the same patch in our tree
> for a few released versions.
> Mind just checking yours in then Andrew?
> Thanks!
> -eric
I talked to Andrew about what files he changed in GCC and created and
tested this new patch. Andrew also mentioned changing some assembly
files in glibc but I don't see any use of '.section .note.GNU-stack' in
any assembly files in glibc (for any platform) so I wasn't planning on
creating a glibc to add them to mips glibc assembly language files.
OK to check in this patch?
Steve Ellcey
sellcey@mips.com
2014-09-26 Steve Ellcey <sellcey@mips.com>
---
gcc/config/mips/mips.c | 3 +++
libgcc/config/mips/crti.S | 4 ++++
libgcc/config/mips/crtn.S | 3 +++
libgcc/config/mips/mips16.S | 4 ++++
libgcc/config/mips/vr4120-div.S | 4 ++++
5 files changed, 18 insertions(+)
--- a/gcc/config/mips/mips.c
+++ b/gcc/config/mips/mips.c
@@ -22881,6 +22881,9 @@ mips_asm_file_end (void)
#define TARGET_ASM_FILE_END mips_asm_file_end
+#undef TARGET_ASM_FILE_END
+#define TARGET_ASM_FILE_END file_end_indicate_exec_stack
+
struct gcc_target targetm = TARGET_INITIALIZER;
#include "gt-mips.h"
--- a/libgcc/config/mips/crti.S
+++ b/libgcc/config/mips/crti.S
@@ -24,6 +24,10 @@ see the files COPYING3 and COPYING.RUNTI
/* An executable stack is *not* required for these functions. */
#include "gnustack.h"
+
+/* An executable stack is *not* required for these functions. */
+ .section .note.GNU-stack,"",%progbits
+
/* 4 slots for argument spill area. 1 for cpreturn, 1 for stack.
Return spill offset of 40 and 20. Aligned to 16 bytes for n32. */
--- a/libgcc/config/mips/crtn.S
+++ b/libgcc/config/mips/crtn.S
@@ -24,6 +24,9 @@ see the files COPYING3 and COPYING.RUNTI
/* An executable stack is *not* required for these functions. */
#include "gnustack.h"
+/* An executable stack is *not* required for these functions. */
+ .section .note.GNU-stack,"",%progbits
+
/* 4 slots for argument spill area. 1 for cpreturn, 1 for stack.
Return spill offset of 40 and 20. Aligned to 16 bytes for n32. */
--- a/libgcc/config/mips/mips16.S
+++ b/libgcc/config/mips/mips16.S
@@ -51,6 +51,10 @@ see the files COPYING3 and COPYING.RUNTI
values using the soft-float calling convention, but do the actual
operation using the hard floating point instructions. */
+/* An executable stack is *not* required for these functions. */
+ .section .note.GNU-stack,"",%progbits
+ .previous
+
#if defined _MIPS_SIM && (_MIPS_SIM == _ABIO32 || _MIPS_SIM == _ABIO64)
/* This file contains 32-bit assembly code. */
--- a/libgcc/config/mips/vr4120-div.S
+++ b/libgcc/config/mips/vr4120-div.S
@@ -29,6 +29,10 @@ see the files COPYING3 and COPYING.RUNTI
-mfix-vr4120. div and ddiv do not give the correct result when one
of the operands is negative. */
+/* An executable stack is *not* required for these functions. */
+ .section .note.GNU-stack,"",%progbits
+ .previous
+
.set nomips16
#define DIV \

View File

@@ -12,8 +12,6 @@ Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
libffi/src/mips/o32.S | 17 +++++++++++++++++
2 files changed, 34 insertions(+)
diff --git a/libffi/src/mips/n32.S b/libffi/src/mips/n32.S
index c6985d30a6f..8f25994773c 100644
--- a/libffi/src/mips/n32.S
+++ b/libffi/src/mips/n32.S
@@ -107,6 +107,16 @@ loadregs:
@@ -89,8 +87,6 @@ index c6985d30a6f..8f25994773c 100644
cls_retstruct_small2:
REG_L v0, V0_OFF2($sp)
diff --git a/libffi/src/mips/o32.S b/libffi/src/mips/o32.S
index eb279813a76..1aff4b14814 100644
--- a/libffi/src/mips/o32.S
+++ b/libffi/src/mips/o32.S
@@ -82,13 +82,16 @@ sixteen:
@@ -170,6 +166,3 @@ index eb279813a76..1aff4b14814 100644
1:
REG_L $3, V1_OFF2($fp)
REG_L $2, V0_OFF2($fp)
--
2.16.3

View File

@@ -0,0 +1,67 @@
From dda6b050cd74a352670787a294596a9c56c21327 Mon Sep 17 00:00:00 2001
From: Yousong Zhou <yszhou4tech@gmail.com>
Date: Fri, 4 May 2018 18:20:53 +0800
Subject: [PATCH] gotools: fix compilation when making cross compiler
libgo is "the runtime support library for the Go programming language.
This library is intended for use with the Go frontend."
gccgo will link target files with libgo.so which depends on libgcc_s.so.1, but
the linker will complain that it cannot find it. That's because shared libgcc
is not present in the install directory yet. libgo.so was made without problem
because gcc will emit -lgcc_s when compiled with -shared option. When gotools
were being made, it was supplied with -static-libgcc thus no link option was
provided. Check LIBGO in gcc/go/gcc-spec.c for how gccgo make a builtin spec
for linking with libgo.so
- GccgoCrossCompilation, https://github.com/golang/go/wiki/GccgoCrossCompilation
- Cross-building instructions, http://www.eglibc.org/archives/patches/msg00078.html
When 3-pass GCC compilation is used, shared libgcc runtime libraries will be
available after gcc pass2 completed and will meet the gotools link requirement
at gcc pass3
---
gotools/Makefile.am | 4 +++-
gotools/Makefile.in | 4 +++-
2 files changed, 6 insertions(+), 2 deletions(-)
--- a/gotools/Makefile.am
+++ b/gotools/Makefile.am
@@ -26,6 +26,7 @@ PWD_COMMAND = $${PWDCMD-pwd}
STAMP = echo timestamp >
libgodir = ../$(target_noncanonical)/libgo
+libgccdir = ../$(target_noncanonical)/libgcc
LIBGODEP = $(libgodir)/libgo.la
LIBGOTOOL = $(libgodir)/libgotool.a
@@ -41,7 +42,8 @@ GOCFLAGS = $(CFLAGS_FOR_TARGET)
GOCOMPILE = $(GOCOMPILER) $(GOCFLAGS)
AM_GOCFLAGS = -I $(libgodir)
-AM_LDFLAGS = -L $(libgodir) -L $(libgodir)/.libs
+AM_LDFLAGS = -L $(libgodir) -L $(libgodir)/.libs \
+ -L $(libgccdir) -L $(libgccdir)/.libs -lgcc_s
GOLINK = $(GOCOMPILER) $(GOCFLAGS) $(AM_GOCFLAGS) $(LDFLAGS) $(AM_LDFLAGS) -o $@
libgosrcdir = $(srcdir)/../libgo/go
--- a/gotools/Makefile.in
+++ b/gotools/Makefile.in
@@ -337,6 +337,7 @@ mkinstalldirs = $(SHELL) $(toplevel_srcd
PWD_COMMAND = $${PWDCMD-pwd}
STAMP = echo timestamp >
libgodir = ../$(target_noncanonical)/libgo
+libgccdir = ../$(target_noncanonical)/libgcc
LIBGODEP = $(libgodir)/libgo.la
LIBGOTOOL = $(libgodir)/libgotool.a
@NATIVE_FALSE@GOCOMPILER = $(GOC)
@@ -346,7 +347,8 @@ LIBGOTOOL = $(libgodir)/libgotool.a
GOCFLAGS = $(CFLAGS_FOR_TARGET)
GOCOMPILE = $(GOCOMPILER) $(GOCFLAGS)
AM_GOCFLAGS = -I $(libgodir)
-AM_LDFLAGS = -L $(libgodir) -L $(libgodir)/.libs
+AM_LDFLAGS = -L $(libgodir) -L $(libgodir)/.libs \
+ -L $(libgccdir) -L $(libgccdir)/.libs -lgcc_s
GOLINK = $(GOCOMPILER) $(GOCFLAGS) $(AM_GOCFLAGS) $(LDFLAGS) $(AM_LDFLAGS) -o $@
libgosrcdir = $(srcdir)/../libgo/go
cmdsrcdir = $(libgosrcdir)/cmd

View File

@@ -1,28 +0,0 @@
commit 1877bc9d8f2be143fbe530347a945850d0ecd234
Author: Steven Barth <cyrus@openwrt.org>
Date: Mon Jun 22 10:31:07 2015 +0000
gcc/musl: rework SSP-support
Make musl provide libssp_nonshared.a and make GCC link it unconditionally
if musl is used. This should be a no-op if SSP is disabled and seems to be
the only reliable way of dealing with SSP over all packages due to the mess
that is linkerflags handling in packages.
Signed-off-by: Steven Barth <steven@midlink.org>
SVN-Revision: 46108
--- a/gcc/gcc.c
+++ b/gcc/gcc.c
@@ -861,7 +861,9 @@ proper position among the other output f
#endif
#ifndef LINK_SSP_SPEC
-#ifdef TARGET_LIBC_PROVIDES_SSP
+#if DEFAULT_LIBC == LIBC_MUSL
+#define LINK_SSP_SPEC "-lssp_nonshared"
+#elif defined(TARGET_LIBC_PROVIDES_SSP)
#define LINK_SSP_SPEC "%{fstack-protector|fstack-protector-all" \
"|fstack-protector-strong|fstack-protector-explicit:}"
#else

View File

@@ -1,34 +0,0 @@
From: ktkachov <ktkachov@138bc75d-0d04-0410-961f-82ee72b054a4>
Date: Wed, 22 Apr 2015 14:20:01 +0000 (+0000)
Subject: unwind fix for musl
X-Git-Url: https://gcc.gnu.org/git/?p=gcc.git;a=commitdiff_plain;h=a2e31d0681d8a47389b8a3552622fbd9827bcef4
unwind fix for musl
On behalf of szabolcs.nagy@arm.com
2015-04-22 Gregor Richards <gregor.richards@uwaterloo.ca>
Szabolcs Nagy <szabolcs.nagy@arm.com>
* unwind-dw2-fde-dip.c (USE_PT_GNU_EH_FRAME): Define it on
Linux if target provides dl_iterate_phdr.
git-svn-id: svn+ssh://gcc.gnu.org/svn/gcc/trunk@222328 138bc75d-0d04-0410-961f-82ee72b054a4
---
--- a/libgcc/unwind-dw2-fde-dip.c
+++ b/libgcc/unwind-dw2-fde-dip.c
@@ -59,6 +59,12 @@
#if !defined(inhibit_libc) && defined(HAVE_LD_EH_FRAME_HDR) \
&& defined(TARGET_DL_ITERATE_PHDR) \
+ && defined(__linux__)
+# define USE_PT_GNU_EH_FRAME
+#endif
+
+#if !defined(inhibit_libc) && defined(HAVE_LD_EH_FRAME_HDR) \
+ && defined(TARGET_DL_ITERATE_PHDR) \
&& (defined(__DragonFly__) || defined(__FreeBSD__))
# define ElfW __ElfN
# define USE_PT_GNU_EH_FRAME

View File

@@ -1,14 +1,13 @@
--- a/gcc/real.h
+++ b/gcc/real.h
@@ -75,9 +75,10 @@
@@ -70,8 +70,10 @@ struct GTY(()) real_value {
+ (REAL_VALUE_TYPE_SIZE%HOST_BITS_PER_WIDE_INT ? 1 : 0)) /* round up */
/* Verify the guess. */
+#ifndef __LP64__
extern char test_real_width
[sizeof (REAL_VALUE_TYPE) <= REAL_WIDTH * sizeof (HOST_WIDE_INT) ? 1 : -1];
-
+#endif
/* Calculate the format for CONST_DOUBLE. We need as many slots as
are necessary to overlay a REAL_VALUE_TYPE on them. This could be
as many as four (32-bit HOST_WIDE_INT, 128-bit REAL_VALUE_TYPE).

View File

@@ -0,0 +1,35 @@
commit 098bd91f5eae625c7d2ee621e10930fc4434e5e2
Author: Luka Perkov <luka@openwrt.org>
Date: Tue Feb 26 16:16:33 2013 +0000
gcc: don't build documentation
This closes #13039.
Signed-off-by: Luka Perkov <luka@openwrt.org>
SVN-Revision: 35807
--- a/gcc/Makefile.in
+++ b/gcc/Makefile.in
@@ -3204,18 +3204,10 @@ doc/gcc.info: $(TEXI_GCC_FILES)
doc/gccint.info: $(TEXI_GCCINT_FILES)
doc/cppinternals.info: $(TEXI_CPPINT_FILES)
-doc/%.info: %.texi
- if [ x$(BUILD_INFO) = xinfo ]; then \
- $(MAKEINFO) $(MAKEINFOFLAGS) -I . -I $(gcc_docdir) \
- -I $(gcc_docdir)/include -o $@ $<; \
- fi
+doc/%.info:
# Duplicate entry to handle renaming of gccinstall.info
-doc/gccinstall.info: $(TEXI_GCCINSTALL_FILES)
- if [ x$(BUILD_INFO) = xinfo ]; then \
- $(MAKEINFO) $(MAKEINFOFLAGS) -I $(gcc_docdir) \
- -I $(gcc_docdir)/include -o $@ $<; \
- fi
+doc/gccinstall.info:
doc/cpp.dvi: $(TEXI_CPP_FILES)
doc/gcc.dvi: $(TEXI_GCC_FILES)

View File

@@ -0,0 +1,20 @@
Fix https://gcc.gnu.org/bugzilla/show_bug.cgi?id=84790.
MIPS16 functions have a static assembler prologue which clobbers
registers v0 and v1. Add these register clobbers to function call
instructions.
--- a/gcc/config/mips/mips.c
+++ b/gcc/config/mips/mips.c
@@ -3102,6 +3102,12 @@ mips_emit_call_insn (rtx pattern, rtx or
emit_insn (gen_update_got_version ());
}
+ if (TARGET_MIPS16 && TARGET_USE_GOT)
+ {
+ clobber_reg (&CALL_INSN_FUNCTION_USAGE (insn), MIPS16_PIC_TEMP);
+ clobber_reg (&CALL_INSN_FUNCTION_USAGE (insn), MIPS_PROLOGUE_TEMP (word_mode));
+ }
+
if (TARGET_MIPS16
&& TARGET_EXPLICIT_RELOCS
&& TARGET_CALL_CLOBBERED_GP)

View File

@@ -0,0 +1,13 @@
--- a/gcc/gcc.c
+++ b/gcc/gcc.c
@@ -868,7 +868,9 @@ proper position among the other output f
#endif
#ifndef LINK_SSP_SPEC
-#ifdef TARGET_LIBC_PROVIDES_SSP
+#if DEFAULT_LIBC == LIBC_MUSL
+#define LINK_SSP_SPEC "-lssp_nonshared"
+#elif defined(TARGET_LIBC_PROVIDES_SSP)
#define LINK_SSP_SPEC "%{fstack-protector|fstack-protector-all" \
"|fstack-protector-strong|fstack-protector-explicit:}"
#else

View File

@@ -0,0 +1,21 @@
commit ecf7671b769fe96f7b5134be442089f8bdba55d2
Author: Felix Fietkau <nbd@nbd.name>
Date: Thu Aug 4 20:29:45 2016 +0200
gcc: add a patch to generate better code with Os on mips
Also happens to reduce compressed code size a bit
Signed-off-by: Felix Fietkau <nbd@nbd.name>
--- a/gcc/config/mips/mips.c
+++ b/gcc/config/mips/mips.c
@@ -19847,7 +19847,7 @@ mips_option_override (void)
flag_pcc_struct_return = 0;
/* Decide which rtx_costs structure to use. */
- if (optimize_size)
+ if (0 && optimize_size)
mips_cost = &mips_rtx_cost_optimize_size;
else
mips_cost = &mips_rtx_cost_data[mips_tune];

View File

@@ -0,0 +1,11 @@
--- a/gcc/config/arm/arm.h
+++ b/gcc/config/arm/arm.h
@@ -155,7 +155,7 @@ extern tree arm_fp16_type_node;
/* Thumb-1 only. */
#define TARGET_THUMB1_ONLY (TARGET_THUMB1 && !arm_arch_notm)
-#define TARGET_LDRD (arm_arch5e && ARM_DOUBLEWORD_ALIGN \
+#define TARGET_LDRD (arm_arch6 && ARM_DOUBLEWORD_ALIGN \
&& !TARGET_THUMB1)
#define TARGET_CRC32 (arm_arch_crc)

View File

@@ -0,0 +1,33 @@
commit 8570c4be394cff7282f332f97da2ff569a927ddb
Author: Imre Kaloz <kaloz@openwrt.org>
Date: Wed Feb 2 20:06:12 2011 +0000
fixup arm soft-float symbols
SVN-Revision: 25325
--- a/libgcc/config/arm/t-linux
+++ b/libgcc/config/arm/t-linux
@@ -1,6 +1,10 @@
LIB1ASMSRC = arm/lib1funcs.S
LIB1ASMFUNCS = _udivsi3 _divsi3 _umodsi3 _modsi3 _dvmd_lnx _clzsi2 _clzdi2 \
- _ctzsi2 _arm_addsubdf3 _arm_addsubsf3
+ _ctzsi2 _arm_addsubdf3 _arm_addsubsf3 \
+ _arm_negdf2 _arm_muldivdf3 _arm_cmpdf2 _arm_unorddf2 \
+ _arm_fixdfsi _arm_fixunsdfsi _arm_truncdfsf2 \
+ _arm_negsf2 _arm_muldivsf3 _arm_cmpsf2 _arm_unordsf2 \
+ _arm_fixsfsi _arm_fixunssfsi
# Just for these, we omit the frame pointer since it makes such a big
# difference.
--- a/gcc/config/arm/linux-elf.h
+++ b/gcc/config/arm/linux-elf.h
@@ -58,8 +58,6 @@
%{shared:-lc} \
%{!shared:%{profile:-lc_p}%{!profile:-lc}}"
-#define LIBGCC_SPEC "%{mfloat-abi=soft*:-lfloat} -lgcc"
-
#define GLIBC_DYNAMIC_LINKER "/lib/ld-linux.so.2"
#define LINUX_TARGET_LINK_SPEC "%{h*} \

View File

@@ -0,0 +1,44 @@
commit c96312958c0621e72c9b32da5bc224ffe2161384
Author: Felix Fietkau <nbd@openwrt.org>
Date: Mon Oct 19 23:26:09 2009 +0000
gcc: create a proper libgcc_pic.a static library for relinking (4.3.3+ for now, backport will follow)
SVN-Revision: 18086
--- a/libgcc/Makefile.in
+++ b/libgcc/Makefile.in
@@ -923,11 +923,12 @@ $(libgcov-driver-objects): %$(objext): $
# Static libraries.
libgcc.a: $(libgcc-objects)
+libgcc_pic.a: $(libgcc-s-objects)
libgcov.a: $(libgcov-objects)
libunwind.a: $(libunwind-objects)
libgcc_eh.a: $(libgcc-eh-objects)
-libgcc.a libgcov.a libunwind.a libgcc_eh.a:
+libgcc.a libgcov.a libunwind.a libgcc_eh.a libgcc_pic.a:
-rm -f $@
objects="$(objects)"; \
@@ -948,7 +949,7 @@ all: libunwind.a
endif
ifeq ($(enable_shared),yes)
-all: libgcc_eh.a libgcc_s$(SHLIB_EXT)
+all: libgcc_eh.a libgcc_pic.a libgcc_s$(SHLIB_EXT)
ifneq ($(LIBUNWIND),)
all: libunwind$(SHLIB_EXT)
libgcc_s$(SHLIB_EXT): libunwind$(SHLIB_EXT)
@@ -1154,6 +1155,10 @@ install-shared:
chmod 644 $(DESTDIR)$(inst_libdir)/libgcc_eh.a
$(RANLIB) $(DESTDIR)$(inst_libdir)/libgcc_eh.a
+ $(INSTALL_DATA) libgcc_pic.a $(mapfile) $(DESTDIR)$(inst_libdir)/
+ chmod 644 $(DESTDIR)$(inst_libdir)/libgcc_pic.a
+ $(RANLIB) $(DESTDIR)$(inst_libdir)/libgcc_pic.a
+
$(subst @multilib_dir@,$(MULTIDIR),$(subst \
@shlib_base_name@,libgcc_s,$(subst \
@shlib_slibdir_qual@,$(MULTIOSSUBDIR),$(SHLIB_INSTALL))))

View File

@@ -50,5 +50,5 @@ Date: Sun Feb 12 20:25:47 2012 +0000
+#define LIBGCC_SPEC "%{!static:%{!static-libgcc:-lgcc_s}} -lgcc"
+
#undef LINK_SHLIB_SPEC
#define LINK_SHLIB_SPEC "%{shared:-shared} %{!shared: %{static:-static}}"
#define LINK_SHLIB_SPEC "%{shared:-shared} %{!shared: %{static:-static}} \
%{static-pie:-static -pie --no-dynamic-linker -z text}"

View File

@@ -0,0 +1,22 @@
commit 64661de100da1ec1061ef3e5e400285dce115e6b
Author: Felix Fietkau <nbd@openwrt.org>
Date: Sun May 10 13:16:35 2015 +0000
gcc: add some size optimization patches
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 45664
--- a/libgcc/config/t-libunwind
+++ b/libgcc/config/t-libunwind
@@ -2,8 +2,7 @@
HOST_LIBGCC2_CFLAGS += -DUSE_GAS_SYMVER
-LIB2ADDEH = $(srcdir)/unwind-sjlj.c $(srcdir)/unwind-c.c \
- $(srcdir)/unwind-compat.c $(srcdir)/unwind-dw2-fde-compat.c
+LIB2ADDEH = $(srcdir)/unwind-sjlj.c $(srcdir)/unwind-c.c
LIB2ADDEHSTATIC = $(srcdir)/unwind-sjlj.c $(srcdir)/unwind-c.c
# Override the default value from t-slibgcc-elf-ver and mention -lunwind

View File

@@ -0,0 +1,11 @@
--- a/gcc/config/rs6000/rs6000.c
+++ b/gcc/config/rs6000/rs6000.c
@@ -24780,7 +24780,7 @@ rs6000_savres_strategy (rs6000_stack_t *
/* Define cutoff for using out-of-line functions to save registers. */
if (DEFAULT_ABI == ABI_V4 || TARGET_ELF)
{
- if (!optimize_size)
+ if (1)
{
strategy |= SAVE_INLINE_FPRS | REST_INLINE_FPRS;
strategy |= SAVE_INLINE_GPRS | REST_INLINE_GPRS;

View File

@@ -0,0 +1,11 @@
--- a/libgcc/crtstuff.c
+++ b/libgcc/crtstuff.c
@@ -152,7 +152,7 @@ call_ ## FUNC (void) \
#endif
#if !defined(USE_TM_CLONE_REGISTRY) && defined(OBJECT_FORMAT_ELF)
-# define USE_TM_CLONE_REGISTRY 1
+# define USE_TM_CLONE_REGISTRY 0
#endif
/* We do not want to add the weak attribute to the declarations of these

View File

@@ -0,0 +1,9 @@
--- a/libgcc/config/mips/t-mips16
+++ b/libgcc/config/mips/t-mips16
@@ -43,3 +43,6 @@ SYNC_CFLAGS = -mno-mips16
# Version these symbols if building libgcc.so.
SHLIB_MAPFILES += $(srcdir)/config/mips/libgcc-mips16.ver
+
+CRTSTUFF_T_CFLAGS += -mno-mips16
+CRTSTUFF_T_CFLAGS_S += -mno-mips16

View File

@@ -17,7 +17,7 @@ Date: Tue Jul 31 00:52:27 2007 +0000
--- a/gcc/c-family/c-opts.c
+++ b/gcc/c-family/c-opts.c
@@ -108,6 +108,9 @@ static int class_dump_flags;
@@ -107,6 +107,9 @@ static dump_flags_t original_dump_flags;
/* Whether any standard preincluded header has been preincluded. */
static bool done_preinclude;
@@ -27,7 +27,7 @@ Date: Tue Jul 31 00:52:27 2007 +0000
static void handle_OPT_d (const char *);
static void set_std_cxx98 (int);
static void set_std_cxx11 (int);
@@ -456,6 +459,12 @@ c_common_handle_option (size_t scode, co
@@ -459,6 +462,12 @@ c_common_handle_option (size_t scode, co
flag_no_builtin = !value;
break;
@@ -40,7 +40,7 @@ Date: Tue Jul 31 00:52:27 2007 +0000
case OPT_fconstant_string_class_:
constant_string_class_name = arg;
break;
@@ -1084,6 +1093,47 @@ c_common_init (void)
@@ -1125,6 +1134,47 @@ c_common_init (void)
return false;
}
@@ -80,7 +80,7 @@ Date: Tue Jul 31 00:52:27 2007 +0000
+ }
+ } else if (evv == 0) {
+ if (honour_copts != 1)
+ inform (0, "someone does not honour COPTS correctly, passed %d times",
+ inform (UNKNOWN_LOCATION, "someone does not honour COPTS correctly, passed %d times",
+ honour_copts);
+ }
+ }
@@ -90,7 +90,7 @@ Date: Tue Jul 31 00:52:27 2007 +0000
--- a/gcc/c-family/c.opt
+++ b/gcc/c-family/c.opt
@@ -1412,6 +1412,9 @@ C++ ObjC++ Optimization Alias(fexception
@@ -1469,6 +1469,9 @@ C++ ObjC++ Optimization Alias(fexception
fhonor-std
C++ ObjC++ Ignore Warn(switch %qs is no longer supported)
@@ -102,7 +102,7 @@ Date: Tue Jul 31 00:52:27 2007 +0000
Assume normal C execution environment.
--- a/gcc/common.opt
+++ b/gcc/common.opt
@@ -1510,6 +1510,9 @@ fguess-branch-probability
@@ -1551,6 +1551,9 @@ fguess-branch-probability
Common Report Var(flag_guess_branch_prob) Optimization
Enable guessing of branch probabilities.
@@ -114,7 +114,7 @@ Date: Tue Jul 31 00:52:27 2007 +0000
; On SVR4 targets, it also controls whether or not to emit a
--- a/gcc/opts.c
+++ b/gcc/opts.c
@@ -1954,6 +1954,9 @@ common_handle_option (struct gcc_options
@@ -2073,6 +2073,9 @@ common_handle_option (struct gcc_options
opts, opts_set, loc, dc);
break;
@@ -126,7 +126,7 @@ Date: Tue Jul 31 00:52:27 2007 +0000
opts->x_warn_larger_than = value != -1;
--- a/gcc/doc/invoke.texi
+++ b/gcc/doc/invoke.texi
@@ -6572,6 +6572,17 @@ This option is only supported for C and
@@ -7013,6 +7013,17 @@ This option is only supported for C and
@option{-Wall} and by @option{-Wpedantic}, which can be disabled with
@option{-Wno-pointer-sign}.

View File

@@ -7,7 +7,7 @@ Date: Sat Apr 21 03:02:39 2012 +0000
--- a/gcc/gcc.c
+++ b/gcc/gcc.c
@@ -9281,8 +9281,10 @@ getenv_spec_function (int argc, const ch
@@ -9347,8 +9347,10 @@ getenv_spec_function (int argc, const ch
value = varname;
if (!value)

View File

@@ -48,9 +48,9 @@ sellcey@mips.com
--- a/gcc/config/mips/mips.c
+++ b/gcc/config/mips/mips.c
@@ -22567,6 +22567,9 @@ mips_promote_function_mode (const_tree t
#undef TARGET_CUSTOM_FUNCTION_DESCRIPTORS
#define TARGET_CUSTOM_FUNCTION_DESCRIPTORS 2
@@ -22640,6 +22640,9 @@ mips_starting_frame_offset (void)
#undef TARGET_STARTING_FRAME_OFFSET
#define TARGET_STARTING_FRAME_OFFSET mips_starting_frame_offset
+#undef TARGET_ASM_FILE_END
+#define TARGET_ASM_FILE_END file_end_indicate_exec_stack

View File

@@ -0,0 +1,168 @@
From c0c62fa4256f805389f16ebfc4a60cf789129b50 Mon Sep 17 00:00:00 2001
From: BangLang Huang <banglang.huang@foxmail.com>
Date: Wed, 9 Nov 2016 10:36:49 +0800
Subject: [PATCH] libffi: fix MIPS softfloat build issue
Backported from github.com/libffi/libffi#272
Signed-off-by: BangLang Huang <banglang.huang@foxmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
---
libffi/src/mips/n32.S | 17 +++++++++++++++++
libffi/src/mips/o32.S | 17 +++++++++++++++++
2 files changed, 34 insertions(+)
--- a/libffi/src/mips/n32.S
+++ b/libffi/src/mips/n32.S
@@ -107,6 +107,16 @@ loadregs:
REG_L t6, 3*FFI_SIZEOF_ARG($fp) # load the flags word into t6.
+#ifdef __mips_soft_float
+ REG_L a0, 0*FFI_SIZEOF_ARG(t9)
+ REG_L a1, 1*FFI_SIZEOF_ARG(t9)
+ REG_L a2, 2*FFI_SIZEOF_ARG(t9)
+ REG_L a3, 3*FFI_SIZEOF_ARG(t9)
+ REG_L a4, 4*FFI_SIZEOF_ARG(t9)
+ REG_L a5, 5*FFI_SIZEOF_ARG(t9)
+ REG_L a6, 6*FFI_SIZEOF_ARG(t9)
+ REG_L a7, 7*FFI_SIZEOF_ARG(t9)
+#else
and t4, t6, ((1<<FFI_FLAG_BITS)-1)
REG_L a0, 0*FFI_SIZEOF_ARG(t9)
beqz t4, arg1_next
@@ -193,6 +203,7 @@ arg7_next:
arg8_doublep:
l.d $f19, 7*FFI_SIZEOF_ARG(t9)
arg8_next:
+#endif
callit:
# Load the function pointer
@@ -214,6 +225,7 @@ retint:
b epilogue
retfloat:
+#ifndef __mips_soft_float
bne t6, FFI_TYPE_FLOAT, retdouble
jal t9
REG_L t4, 4*FFI_SIZEOF_ARG($fp)
@@ -272,6 +284,7 @@ retstruct_f_d:
s.s $f0, 0(t4)
s.d $f2, 8(t4)
b epilogue
+#endif
retstruct_d_soft:
bne t6, FFI_TYPE_STRUCT_D_SOFT, retstruct_f_soft
@@ -429,6 +442,7 @@ ffi_closure_N32:
REG_S a6, A6_OFF2($sp)
REG_S a7, A7_OFF2($sp)
+#ifndef __mips_soft_float
# Store all possible float/double registers.
s.d $f12, F12_OFF2($sp)
s.d $f13, F13_OFF2($sp)
@@ -438,6 +452,7 @@ ffi_closure_N32:
s.d $f17, F17_OFF2($sp)
s.d $f18, F18_OFF2($sp)
s.d $f19, F19_OFF2($sp)
+#endif
# Call ffi_closure_mips_inner_N32 to do the real work.
LA t9, ffi_closure_mips_inner_N32
@@ -458,6 +473,7 @@ cls_retint:
b cls_epilogue
cls_retfloat:
+#ifndef __mips_soft_float
bne v0, FFI_TYPE_FLOAT, cls_retdouble
l.s $f0, V0_OFF2($sp)
b cls_epilogue
@@ -500,6 +516,7 @@ cls_retstruct_f_d:
l.s $f0, V0_OFF2($sp)
l.d $f2, V1_OFF2($sp)
b cls_epilogue
+#endif
cls_retstruct_small2:
REG_L v0, V0_OFF2($sp)
--- a/libffi/src/mips/o32.S
+++ b/libffi/src/mips/o32.S
@@ -82,13 +82,16 @@ sixteen:
ADDU $sp, 4 * FFI_SIZEOF_ARG # adjust $sp to new args
+#ifndef __mips_soft_float
bnez t0, pass_d # make it quick for int
+#endif
REG_L a0, 0*FFI_SIZEOF_ARG($sp) # just go ahead and load the
REG_L a1, 1*FFI_SIZEOF_ARG($sp) # four regs.
REG_L a2, 2*FFI_SIZEOF_ARG($sp)
REG_L a3, 3*FFI_SIZEOF_ARG($sp)
b call_it
+#ifndef __mips_soft_float
pass_d:
bne t0, FFI_ARGS_D, pass_f
l.d $f12, 0*FFI_SIZEOF_ARG($sp) # load $fp regs from args
@@ -130,6 +133,7 @@ pass_f_d:
# bne t0, FFI_ARGS_F_D, call_it
l.s $f12, 0*FFI_SIZEOF_ARG($sp) # load $fp regs from args
l.d $f14, 2*FFI_SIZEOF_ARG($sp) # passing double and float
+#endif
call_it:
# Load the function pointer
@@ -158,14 +162,23 @@ retfloat:
bne t2, FFI_TYPE_FLOAT, retdouble
jalr t9
REG_L t0, SIZEOF_FRAME + 4*FFI_SIZEOF_ARG($fp)
+#ifndef __mips_soft_float
s.s $f0, 0(t0)
+#else
+ REG_S v0, 0(t0)
+#endif
b epilogue
retdouble:
bne t2, FFI_TYPE_DOUBLE, noretval
jalr t9
REG_L t0, SIZEOF_FRAME + 4*FFI_SIZEOF_ARG($fp)
+#ifndef __mips_soft_float
s.d $f0, 0(t0)
+#else
+ REG_S v1, 4(t0)
+ REG_S v0, 0(t0)
+#endif
b epilogue
noretval:
@@ -261,9 +274,11 @@ $LCFI7:
li $13, 1 # FFI_O32
bne $16, $13, 1f # Skip fp save if FFI_O32_SOFT_FLOAT
+#ifndef __mips_soft_float
# Store all possible float/double registers.
s.d $f12, FA_0_0_OFF2($fp)
s.d $f14, FA_1_0_OFF2($fp)
+#endif
1:
# Call ffi_closure_mips_inner_O32 to do the work.
la t9, ffi_closure_mips_inner_O32
@@ -281,6 +296,7 @@ $LCFI7:
li $13, 1 # FFI_O32
bne $16, $13, 1f # Skip fp restore if FFI_O32_SOFT_FLOAT
+#ifndef __mips_soft_float
li $9, FFI_TYPE_FLOAT
l.s $f0, V0_OFF2($fp)
beq $8, $9, closure_done
@@ -288,6 +304,7 @@ $LCFI7:
li $9, FFI_TYPE_DOUBLE
l.d $f0, V0_OFF2($fp)
beq $8, $9, closure_done
+#endif
1:
REG_L $3, V1_OFF2($fp)
REG_L $2, V0_OFF2($fp)

View File

@@ -25,8 +25,6 @@ at gcc pass3
gotools/Makefile.in | 4 +++-
2 files changed, 6 insertions(+), 2 deletions(-)
diff --git a/gotools/Makefile.am b/gotools/Makefile.am
index 5f3940a278b..9c22f5df103 100644
--- a/gotools/Makefile.am
+++ b/gotools/Makefile.am
@@ -26,6 +26,7 @@ PWD_COMMAND = $${PWDCMD-pwd}
@@ -36,38 +34,34 @@ index 5f3940a278b..9c22f5df103 100644
+libgccdir = ../$(target_noncanonical)/libgcc
LIBGODEP = $(libgodir)/libgo.la
if NATIVE
@@ -38,7 +39,8 @@ endif
GOCFLAGS = $(CFLAGS_FOR_TARGET)
LIBGOTOOL = $(libgodir)/libgotool.a
@@ -41,7 +42,8 @@ GOCFLAGS = $(CFLAGS_FOR_TARGET)
GOCOMPILE = $(GOCOMPILER) $(GOCFLAGS)
AM_GOCFLAGS = -I $(libgodir)
-AM_LDFLAGS = -L $(libgodir) -L $(libgodir)/.libs
+AM_LDFLAGS = -L $(libgodir) -L $(libgodir)/.libs \
+ -L $(libgccdir) -L $(libgccdir)/.libs -lgcc_s
GOLINK = $(GOCOMPILER) $(GOCFLAGS) $(AM_GOCFLAGS) $(LDFLAGS) $(AM_LDFLAGS) -o $@
cmdsrcdir = $(srcdir)/../libgo/go/cmd
diff --git a/gotools/Makefile.in b/gotools/Makefile.in
index 4386576b011..0bdd9290e01 100644
libgosrcdir = $(srcdir)/../libgo/go
--- a/gotools/Makefile.in
+++ b/gotools/Makefile.in
@@ -252,13 +252,15 @@ mkinstalldirs = $(SHELL) $(toplevel_srcdir)/mkinstalldirs
@@ -263,6 +263,7 @@ mkinstalldirs = $(SHELL) $(toplevel_srcd
PWD_COMMAND = $${PWDCMD-pwd}
STAMP = echo timestamp >
libgodir = ../$(target_noncanonical)/libgo
+libgccdir = ../$(target_noncanonical)/libgcc
LIBGODEP = $(libgodir)/libgo.la
LIBGOTOOL = $(libgodir)/libgotool.a
@NATIVE_FALSE@GOCOMPILER = $(GOC)
# Use the compiler we just built.
@@ -271,7 +272,8 @@ LIBGOTOOL = $(libgodir)/libgotool.a
@NATIVE_TRUE@GOCOMPILER = $(GOC_FOR_TARGET) $(XGCC_FLAGS_FOR_TARGET)
GOCOMPILE = $(GOCOMPILER) $(GOCFLAGS)
AM_GOCFLAGS = -I $(libgodir)
-AM_LDFLAGS = -L $(libgodir) -L $(libgodir)/.libs
+AM_LDFLAGS = -L $(libgodir) -L $(libgodir)/.libs \
+ -L $(libgccdir) -L $(libgccdir)/.libs -lgcc_s
GOLINK = $(GOCOMPILER) $(GOCFLAGS) $(AM_GOCFLAGS) $(LDFLAGS) $(AM_LDFLAGS) -o $@
cmdsrcdir = $(srcdir)/../libgo/go/cmd
go_cmd_go_files = \
--
2.16.3
libgosrcdir = $(srcdir)/../libgo/go
cmdsrcdir = $(libgosrcdir)/cmd

View File

@@ -1,32 +0,0 @@
commit b050f87d13b5dc7ed82feb9a90f4529de58bdf25
Author: Felix Fietkau <nbd@openwrt.org>
Date: Wed Feb 19 19:20:10 2014 +0000
gcc: prevent the use of LDRD/STRD on ARMv5TE
These instructions are for 64-bit load/store. On ARMv5TE, the CPU
requires addresses to be aligned to 64-bit. When misaligned, behavior is
undefined (effectively either loads the same word twice on LDRD, or
corrupts surrounding memory on STRD).
On ARMv6 and newer, unaligned access is safe.
Removing these instructions for ARMv5TE is necessary, because GCC
ignores alignment information in pointers and does unsafe optimizations
that have shown up as bugs in various places.
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39638
--- a/gcc/config/arm/arm.h
+++ b/gcc/config/arm/arm.h
@@ -150,7 +150,7 @@ extern tree arm_fp16_type_node;
/* Thumb-1 only. */
#define TARGET_THUMB1_ONLY (TARGET_THUMB1 && !arm_arch_notm)
-#define TARGET_LDRD (arm_arch5e && ARM_DOUBLEWORD_ALIGN \
+#define TARGET_LDRD (arm_arch6 && ARM_DOUBLEWORD_ALIGN \
&& !TARGET_THUMB1)
#define TARGET_CRC32 (arm_arch_crc)

View File

@@ -1,18 +0,0 @@
commit d8c570a1531035c3e26bcd94741e5f5b9c36b5d9
Author: Felix Fietkau <nbd@openwrt.org>
Date: Mon Mar 5 00:51:01 2012 +0000
gcc: do not emit references to _savegpr_* and _restgpr_* on powerpc, as they are tricky to deal with wrt. libgcc. they cannot be linked dynamically
SVN-Revision: 30814
--- a/gcc/config/rs6000/rs6000.c
+++ b/gcc/config/rs6000/rs6000.c
@@ -26981,7 +26981,7 @@ rs6000_savres_strategy (rs6000_stack_t *
/* Define cutoff for using out-of-line functions to save registers. */
if (DEFAULT_ABI == ABI_V4 || TARGET_ELF)
{
- if (!optimize_size)
+ if (1)
{
strategy |= SAVE_INLINE_FPRS | REST_INLINE_FPRS;
strategy |= SAVE_INLINE_GPRS | REST_INLINE_GPRS;

View File

@@ -1,22 +0,0 @@
commit 565988ab47bd9b96b50608564aee2104aeb4b7ae
Author: Felix Fietkau <nbd@nbd.name>
Date: Tue Dec 13 14:20:49 2016 +0100
gcc: rip out transactional memory related bloat from crtbegin
Slightly improves compression for each executable, saving about 4k from
the default ar71xx rootfs
Signed-off-by: Felix Fietkau <nbd@nbd.name>
--- a/libgcc/crtstuff.c
+++ b/libgcc/crtstuff.c
@@ -152,7 +152,7 @@ call_ ## FUNC (void) \
#endif
#if !defined(USE_TM_CLONE_REGISTRY) && defined(OBJECT_FORMAT_ELF)
-# define USE_TM_CLONE_REGISTRY 1
+# define USE_TM_CLONE_REGISTRY 0
#endif
/* We do not want to add the weak attribute to the declarations of these

View File

@@ -0,0 +1,24 @@
commit 81cc26c706b2bc8c8c1eb1a322e5c5157900836e
Author: Felix Fietkau <nbd@openwrt.org>
Date: Sun Oct 19 21:45:51 2014 +0000
gcc: do not assume that the Mac OS X filesystem is case insensitive
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 42973
--- a/include/filenames.h
+++ b/include/filenames.h
@@ -43,11 +43,6 @@ extern "C" {
# define IS_DIR_SEPARATOR(c) IS_DOS_DIR_SEPARATOR (c)
# define IS_ABSOLUTE_PATH(f) IS_DOS_ABSOLUTE_PATH (f)
#else /* not DOSish */
-# if defined(__APPLE__)
-# ifndef HAVE_CASE_INSENSITIVE_FILE_SYSTEM
-# define HAVE_CASE_INSENSITIVE_FILE_SYSTEM 1
-# endif
-# endif /* __APPLE__ */
# define HAS_DRIVE_SPEC(f) (0)
# define IS_DIR_SEPARATOR(c) IS_UNIX_DIR_SEPARATOR (c)
# define IS_ABSOLUTE_PATH(f) IS_UNIX_ABSOLUTE_PATH (f)

View File

@@ -0,0 +1,35 @@
commit 098bd91f5eae625c7d2ee621e10930fc4434e5e2
Author: Luka Perkov <luka@openwrt.org>
Date: Tue Feb 26 16:16:33 2013 +0000
gcc: don't build documentation
This closes #13039.
Signed-off-by: Luka Perkov <luka@openwrt.org>
SVN-Revision: 35807
--- a/gcc/Makefile.in
+++ b/gcc/Makefile.in
@@ -3203,18 +3203,10 @@ doc/gcc.info: $(TEXI_GCC_FILES)
doc/gccint.info: $(TEXI_GCCINT_FILES)
doc/cppinternals.info: $(TEXI_CPPINT_FILES)
-doc/%.info: %.texi
- if [ x$(BUILD_INFO) = xinfo ]; then \
- $(MAKEINFO) $(MAKEINFOFLAGS) -I . -I $(gcc_docdir) \
- -I $(gcc_docdir)/include -o $@ $<; \
- fi
+doc/%.info:
# Duplicate entry to handle renaming of gccinstall.info
-doc/gccinstall.info: $(TEXI_GCCINSTALL_FILES)
- if [ x$(BUILD_INFO) = xinfo ]; then \
- $(MAKEINFO) $(MAKEINFOFLAGS) -I $(gcc_docdir) \
- -I $(gcc_docdir)/include -o $@ $<; \
- fi
+doc/gccinstall.info:
doc/cpp.dvi: $(TEXI_CPP_FILES)
doc/gcc.dvi: $(TEXI_GCC_FILES)

View File

@@ -0,0 +1,20 @@
Fix https://gcc.gnu.org/bugzilla/show_bug.cgi?id=84790.
MIPS16 functions have a static assembler prologue which clobbers
registers v0 and v1. Add these register clobbers to function call
instructions.
--- a/gcc/config/mips/mips.c
+++ b/gcc/config/mips/mips.c
@@ -3131,6 +3131,12 @@ mips_emit_call_insn (rtx pattern, rtx or
emit_insn (gen_update_got_version ());
}
+ if (TARGET_MIPS16 && TARGET_USE_GOT)
+ {
+ clobber_reg (&CALL_INSN_FUNCTION_USAGE (insn), MIPS16_PIC_TEMP);
+ clobber_reg (&CALL_INSN_FUNCTION_USAGE (insn), MIPS_PROLOGUE_TEMP (word_mode));
+ }
+
if (TARGET_MIPS16
&& TARGET_EXPLICIT_RELOCS
&& TARGET_CALL_CLOBBERED_GP)

View File

@@ -0,0 +1,13 @@
--- a/gcc/gcc.c
+++ b/gcc/gcc.c
@@ -876,7 +876,9 @@ proper position among the other output f
#endif
#ifndef LINK_SSP_SPEC
-#ifdef TARGET_LIBC_PROVIDES_SSP
+#if DEFAULT_LIBC == LIBC_MUSL
+#define LINK_SSP_SPEC "-lssp_nonshared"
+#elif defined(TARGET_LIBC_PROVIDES_SSP)
#define LINK_SSP_SPEC "%{fstack-protector|fstack-protector-all" \
"|fstack-protector-strong|fstack-protector-explicit:}"
#else

View File

@@ -0,0 +1,21 @@
commit ecf7671b769fe96f7b5134be442089f8bdba55d2
Author: Felix Fietkau <nbd@nbd.name>
Date: Thu Aug 4 20:29:45 2016 +0200
gcc: add a patch to generate better code with Os on mips
Also happens to reduce compressed code size a bit
Signed-off-by: Felix Fietkau <nbd@nbd.name>
--- a/gcc/config/mips/mips.c
+++ b/gcc/config/mips/mips.c
@@ -19994,7 +19994,7 @@ mips_option_override (void)
flag_pcc_struct_return = 0;
/* Decide which rtx_costs structure to use. */
- if (optimize_size)
+ if (0 && optimize_size)
mips_cost = &mips_rtx_cost_optimize_size;
else
mips_cost = &mips_rtx_cost_data[mips_tune];

View File

@@ -0,0 +1,33 @@
commit 8570c4be394cff7282f332f97da2ff569a927ddb
Author: Imre Kaloz <kaloz@openwrt.org>
Date: Wed Feb 2 20:06:12 2011 +0000
fixup arm soft-float symbols
SVN-Revision: 25325
--- a/libgcc/config/arm/t-linux
+++ b/libgcc/config/arm/t-linux
@@ -1,6 +1,10 @@
LIB1ASMSRC = arm/lib1funcs.S
LIB1ASMFUNCS = _udivsi3 _divsi3 _umodsi3 _modsi3 _dvmd_lnx _clzsi2 _clzdi2 \
- _ctzsi2 _arm_addsubdf3 _arm_addsubsf3
+ _ctzsi2 _arm_addsubdf3 _arm_addsubsf3 \
+ _arm_negdf2 _arm_muldivdf3 _arm_cmpdf2 _arm_unorddf2 \
+ _arm_fixdfsi _arm_fixunsdfsi _arm_truncdfsf2 \
+ _arm_negsf2 _arm_muldivsf3 _arm_cmpsf2 _arm_unordsf2 \
+ _arm_fixsfsi _arm_fixunssfsi
# Just for these, we omit the frame pointer since it makes such a big
# difference.
--- a/gcc/config/arm/linux-elf.h
+++ b/gcc/config/arm/linux-elf.h
@@ -58,8 +58,6 @@
%{shared:-lc} \
%{!shared:%{profile:-lc_p}%{!profile:-lc}}"
-#define LIBGCC_SPEC "%{mfloat-abi=soft*:-lfloat} -lgcc"
-
#define GLIBC_DYNAMIC_LINKER "/lib/ld-linux.so.2"
#define LINUX_TARGET_LINK_SPEC "%{h*} \

View File

@@ -0,0 +1,44 @@
commit c96312958c0621e72c9b32da5bc224ffe2161384
Author: Felix Fietkau <nbd@openwrt.org>
Date: Mon Oct 19 23:26:09 2009 +0000
gcc: create a proper libgcc_pic.a static library for relinking (4.3.3+ for now, backport will follow)
SVN-Revision: 18086
--- a/libgcc/Makefile.in
+++ b/libgcc/Makefile.in
@@ -927,11 +927,12 @@ $(libgcov-driver-objects): %$(objext): $
# Static libraries.
libgcc.a: $(libgcc-objects)
+libgcc_pic.a: $(libgcc-s-objects)
libgcov.a: $(libgcov-objects)
libunwind.a: $(libunwind-objects)
libgcc_eh.a: $(libgcc-eh-objects)
-libgcc.a libgcov.a libunwind.a libgcc_eh.a:
+libgcc.a libgcov.a libunwind.a libgcc_eh.a libgcc_pic.a:
-rm -f $@
objects="$(objects)"; \
@@ -955,7 +956,7 @@ all: libunwind.a
endif
ifeq ($(enable_shared),yes)
-all: libgcc_eh.a libgcc_s$(SHLIB_EXT)
+all: libgcc_eh.a libgcc_pic.a libgcc_s$(SHLIB_EXT)
ifneq ($(LIBUNWIND),)
all: libunwind$(SHLIB_EXT)
libgcc_s$(SHLIB_EXT): libunwind$(SHLIB_EXT)
@@ -1161,6 +1162,10 @@ install-shared:
chmod 644 $(DESTDIR)$(inst_libdir)/libgcc_eh.a
$(RANLIB) $(DESTDIR)$(inst_libdir)/libgcc_eh.a
+ $(INSTALL_DATA) libgcc_pic.a $(mapfile) $(DESTDIR)$(inst_libdir)/
+ chmod 644 $(DESTDIR)$(inst_libdir)/libgcc_pic.a
+ $(RANLIB) $(DESTDIR)$(inst_libdir)/libgcc_pic.a
+
$(subst @multilib_dir@,$(MULTIDIR),$(subst \
@shlib_base_name@,libgcc_s,$(subst \
@shlib_slibdir_qual@,$(MULTIOSSUBDIR),$(SHLIB_INSTALL))))

View File

@@ -0,0 +1,28 @@
commit 7edc8ca5456d9743dd0075eb3cc5b04f4f24c8cc
Author: Imre Kaloz <kaloz@openwrt.org>
Date: Wed Feb 2 19:34:36 2011 +0000
add armv4 fixup patches
SVN-Revision: 25322
--- a/gcc/config/arm/linux-eabi.h
+++ b/gcc/config/arm/linux-eabi.h
@@ -91,10 +91,15 @@
#define MUSL_DYNAMIC_LINKER \
"/lib/ld-musl-arm" MUSL_DYNAMIC_LINKER_E "%{mfloat-abi=hard:hf}.so.1"
+/* For armv4 we pass --fix-v4bx to linker to support EABI */
+#undef TARGET_FIX_V4BX_SPEC
+#define TARGET_FIX_V4BX_SPEC " %{mcpu=arm8|mcpu=arm810|mcpu=strongarm*"\
+ "|march=armv4|mcpu=fa526|mcpu=fa626:--fix-v4bx}"
+
/* At this point, bpabi.h will have clobbered LINK_SPEC. We want to
use the GNU/Linux version, not the generic BPABI version. */
#undef LINK_SPEC
-#define LINK_SPEC EABI_LINK_SPEC \
+#define LINK_SPEC EABI_LINK_SPEC TARGET_FIX_V4BX_SPEC \
LINUX_OR_ANDROID_LD (LINUX_TARGET_LINK_SPEC, \
LINUX_TARGET_LINK_SPEC " " ANDROID_LINK_SPEC)

View File

@@ -0,0 +1,54 @@
commit dcfc40358b5a3cae7320c17f8d1cebd5ad5540cd
Author: Felix Fietkau <nbd@openwrt.org>
Date: Sun Feb 12 20:25:47 2012 +0000
gcc 4.6: port over the missing patch 850-use_shared_libgcc.patch to prevent libgcc crap from leaking into every single binary
SVN-Revision: 30486
--- a/gcc/config/arm/linux-eabi.h
+++ b/gcc/config/arm/linux-eabi.h
@@ -129,10 +129,6 @@
"%{Ofast|ffast-math|funsafe-math-optimizations:crtfastmath.o%s} " \
LINUX_OR_ANDROID_LD (GNU_USER_TARGET_ENDFILE_SPEC, ANDROID_ENDFILE_SPEC)
-/* Use the default LIBGCC_SPEC, not the version in linux-elf.h, as we
- do not use -lfloat. */
-#undef LIBGCC_SPEC
-
/* Clear the instruction cache from `beg' to `end'. This is
implemented in lib1funcs.S, so ensure an error if this definition
is used. */
--- a/gcc/config/linux.h
+++ b/gcc/config/linux.h
@@ -66,6 +66,10 @@ see the files COPYING3 and COPYING.RUNTI
builtin_version ("CRuntime_Musl"); \
} while (0)
+#ifndef LIBGCC_SPEC
+#define LIBGCC_SPEC "%{static|static-libgcc:-lgcc}%{!static:%{!static-libgcc:-lgcc_s}}"
+#endif
+
/* Determine which dynamic linker to use depending on whether GLIBC or
uClibc or Bionic or musl is the default C library and whether
-muclibc or -mglibc or -mbionic or -mmusl has been passed to change
--- a/libgcc/mkmap-symver.awk
+++ b/libgcc/mkmap-symver.awk
@@ -136,5 +136,5 @@ function output(lib) {
else if (inherit[lib])
printf("} %s;\n", inherit[lib]);
else
- printf ("\n local:\n\t*;\n};\n");
+ printf ("\n\t*;\n};\n");
}
--- a/gcc/config/rs6000/linux.h
+++ b/gcc/config/rs6000/linux.h
@@ -62,6 +62,9 @@
#undef CPP_OS_DEFAULT_SPEC
#define CPP_OS_DEFAULT_SPEC "%(cpp_os_linux)"
+#undef LIBGCC_SPEC
+#define LIBGCC_SPEC "%{!static:%{!static-libgcc:-lgcc_s}} -lgcc"
+
#undef LINK_SHLIB_SPEC
#define LINK_SHLIB_SPEC "%{shared:-shared} %{!shared: %{static:-static}} \
%{static-pie:-static -pie --no-dynamic-linker -z text}"

View File

@@ -0,0 +1,22 @@
commit 64661de100da1ec1061ef3e5e400285dce115e6b
Author: Felix Fietkau <nbd@openwrt.org>
Date: Sun May 10 13:16:35 2015 +0000
gcc: add some size optimization patches
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 45664
--- a/libgcc/config/t-libunwind
+++ b/libgcc/config/t-libunwind
@@ -2,8 +2,7 @@
HOST_LIBGCC2_CFLAGS += -DUSE_GAS_SYMVER
-LIB2ADDEH = $(srcdir)/unwind-sjlj.c $(srcdir)/unwind-c.c \
- $(srcdir)/unwind-compat.c $(srcdir)/unwind-dw2-fde-compat.c
+LIB2ADDEH = $(srcdir)/unwind-sjlj.c $(srcdir)/unwind-c.c
LIB2ADDEHSTATIC = $(srcdir)/unwind-sjlj.c $(srcdir)/unwind-c.c
# Override the default value from t-slibgcc-elf-ver and mention -lunwind

View File

@@ -0,0 +1,11 @@
--- a/gcc/config/rs6000/rs6000.c
+++ b/gcc/config/rs6000/rs6000.c
@@ -24474,7 +24474,7 @@ rs6000_savres_strategy (rs6000_stack_t *
/* Define cutoff for using out-of-line functions to save registers. */
if (DEFAULT_ABI == ABI_V4 || TARGET_ELF)
{
- if (!optimize_size)
+ if (1)
{
strategy |= SAVE_INLINE_FPRS | REST_INLINE_FPRS;
strategy |= SAVE_INLINE_GPRS | REST_INLINE_GPRS;

View File

@@ -0,0 +1,11 @@
--- a/libgcc/crtstuff.c
+++ b/libgcc/crtstuff.c
@@ -152,7 +152,7 @@ call_ ## FUNC (void) \
#endif
#if !defined(USE_TM_CLONE_REGISTRY) && defined(OBJECT_FORMAT_ELF)
-# define USE_TM_CLONE_REGISTRY 1
+# define USE_TM_CLONE_REGISTRY 0
#endif
/* We do not want to add the weak attribute to the declarations of these

View File

@@ -0,0 +1,9 @@
--- a/libgcc/config/mips/t-mips16
+++ b/libgcc/config/mips/t-mips16
@@ -43,3 +43,6 @@ SYNC_CFLAGS = -mno-mips16
# Version these symbols if building libgcc.so.
SHLIB_MAPFILES += $(srcdir)/config/mips/libgcc-mips16.ver
+
+CRTSTUFF_T_CFLAGS += -mno-mips16
+CRTSTUFF_T_CFLAGS_S += -mno-mips16

View File

@@ -0,0 +1,146 @@
commit 99368862e44740ff4fd33760893f04e14f9dbdf1
Author: Felix Fietkau <nbd@openwrt.org>
Date: Tue Jul 31 00:52:27 2007 +0000
Port the mbsd_multi patch from freewrt, which adds -fhonour-copts. This will emit warnings in packages that don't use our target cflags properly
SVN-Revision: 8256
This patch brings over a feature from MirBSD:
* -fhonour-copts
If this option is not given, it's warned (depending
on environment variables). This is to catch errors
of misbuilt packages which override CFLAGS themselves.
This patch was authored by Thorsten Glaser <tg at mirbsd.de>
with copyright assignment to the FSF in effect.
--- a/gcc/c-family/c-opts.c
+++ b/gcc/c-family/c-opts.c
@@ -107,6 +107,9 @@ static dump_flags_t original_dump_flags;
/* Whether any standard preincluded header has been preincluded. */
static bool done_preinclude;
+/* Check if a port honours COPTS. */
+static int honour_copts = 0;
+
static void handle_OPT_d (const char *);
static void set_std_cxx98 (int);
static void set_std_cxx11 (int);
@@ -452,6 +455,12 @@ c_common_handle_option (size_t scode, co
flag_no_builtin = !value;
break;
+ case OPT_fhonour_copts:
+ if (c_language == clk_c) {
+ honour_copts++;
+ }
+ break;
+
case OPT_fconstant_string_class_:
constant_string_class_name = arg;
break;
@@ -1138,6 +1147,47 @@ c_common_init (void)
return false;
}
+ if (c_language == clk_c) {
+ char *ev = getenv ("GCC_HONOUR_COPTS");
+ int evv;
+ if (ev == NULL)
+ evv = -1;
+ else if ((*ev == '0') || (*ev == '\0'))
+ evv = 0;
+ else if (*ev == '1')
+ evv = 1;
+ else if (*ev == '2')
+ evv = 2;
+ else if (*ev == 's')
+ evv = -1;
+ else {
+ warning (0, "unknown GCC_HONOUR_COPTS value, assuming 1");
+ evv = 1; /* maybe depend this on something like MIRBSD_NATIVE? */
+ }
+ if (evv == 1) {
+ if (honour_copts == 0) {
+ error ("someone does not honour COPTS at all in lenient mode");
+ return false;
+ } else if (honour_copts != 1) {
+ warning (0, "someone does not honour COPTS correctly, passed %d times",
+ honour_copts);
+ }
+ } else if (evv == 2) {
+ if (honour_copts == 0) {
+ error ("someone does not honour COPTS at all in strict mode");
+ return false;
+ } else if (honour_copts != 1) {
+ error ("someone does not honour COPTS correctly, passed %d times",
+ honour_copts);
+ return false;
+ }
+ } else if (evv == 0) {
+ if (honour_copts != 1)
+ inform (UNKNOWN_LOCATION, "someone does not honour COPTS correctly, passed %d times",
+ honour_copts);
+ }
+ }
+
return true;
}
--- a/gcc/c-family/c.opt
+++ b/gcc/c-family/c.opt
@@ -1521,6 +1521,9 @@ C++ ObjC++ Optimization Alias(fexception
fhonor-std
C++ ObjC++ Deprecated
+fhonour-copts
+C ObjC C++ ObjC++ RejectNegative
+
fhosted
C ObjC
Assume normal C execution environment.
--- a/gcc/common.opt
+++ b/gcc/common.opt
@@ -1589,6 +1589,9 @@ fguess-branch-probability
Common Report Var(flag_guess_branch_prob) Optimization
Enable guessing of branch probabilities.
+fhonour-copts
+Common RejectNegative
+
; Nonzero means ignore `#ident' directives. 0 means handle them.
; Generate position-independent code for executables if possible
; On SVR4 targets, it also controls whether or not to emit a
--- a/gcc/doc/invoke.texi
+++ b/gcc/doc/invoke.texi
@@ -7666,6 +7666,17 @@ This option is only supported for C and
@option{-Wall} and by @option{-Wpedantic}, which can be disabled with
@option{-Wno-pointer-sign}.
+@item -fhonour-copts
+@opindex fhonour-copts
+If @env{GCC_HONOUR_COPTS} is set to 1, abort if this option is not
+given at least once, and warn if it is given more than once.
+If @env{GCC_HONOUR_COPTS} is set to 2, abort if this option is not
+given exactly once.
+If @env{GCC_HONOUR_COPTS} is set to 0 or unset, warn if this option
+is not given exactly once.
+The warning is quelled if @env{GCC_HONOUR_COPTS} is set to @samp{s}.
+This flag and environment variable only affect the C language.
+
@item -Wstack-protector
@opindex Wstack-protector
@opindex Wno-stack-protector
--- a/gcc/opts.c
+++ b/gcc/opts.c
@@ -2314,6 +2314,9 @@ common_handle_option (struct gcc_options
/* Currently handled in a prescan. */
break;
+ case OPT_fhonour_copts:
+ break;
+
case OPT_Werror:
dc->warning_as_error_requested = value;
break;

Some files were not shown because too many files have changed in this diff Show More