Commit Graph

16930 Commits

Author SHA1 Message Date
Marc Benoit 33eda8575b syncthing: configuration cleanup & hardening
Run the service under an unprivileged
user account

The following parameters are now configurable
  niceness
  max concurrency (defaults to number of CPUs)
  user

Added flags "-no-browser"
Disabled in-place upgrades (disabled in the
build already)

Redirected stderr/stdout to syslog

Added support for "reload_config"

Increased "term_timeout" to 15s to give it
plenty of time to shut down gracefully

Properly handled non-existing directories

Removed a softlink that assumes a specific naming
convention in syncthing

Added a comment that using external storage is a
recommend configration

Signed-off-by: Marc Benoit <marcb62185@gmail.com>
[increased package release]
Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit a9443eb0eb)
Tested-by: Marc Benoit <marcb62185@gmail.com>
2020-03-25 08:28:24 -10:00
Paul Spooren e4c685e5bd syncthing: bump to 1.4.0
Release information:
https://github.com/syncthing/syncthing/releases/tag/v1.4.0

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 3a651638ce)
Tested-by: Marc Benoit <marcb62185@gmail.com>
2020-03-25 08:28:24 -10:00
Paul Spooren b8dafa4750 syncthing: fixup version detection
Since upstream commit dc92994 the LDFLAGS used for settings the version
(and build host and user) changed resulting in "unknown" versions in
syncthing.

Correct version detection is important for syncthing to assure
compatibility with other running instances. The "unknown" version fails
to communicate and sync with correctly compiled instances.

This patch updates the syncthing Makefile to inject the correct
variables and thereby fixes the version detection in syncthing.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit b85e387cc2)
Tested-by: Marc Benoit <marcb62185@gmail.com>
2020-03-25 08:28:24 -10:00
Sven Roederer f7308a55fa strongswan: add conffiles for swanctl util
Add a conffiles-section for the /etc/swanctl folder, which is used by the  swanctl util. This will keep the configfiles during an sysupgrade.

Signed-off-by: Sven Roederer <S.Roederer@colvistec.de>
(cherry picked from commit 49f298eb74)
2020-03-25 19:26:11 +02:00
Eneas U de Queiroz ba76d4274e strongswan: quote 'comment' parameter in Config.in
Newer versions of the kconfig generator require quotes.  Prepare the
package for an eventual update.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 404c113bc2)
2020-03-25 19:26:11 +02:00
Karl Palsson 1cd3f5fdc2 net/pagekitec: support status reporting json file
Allows luci webapp to report health more dynamically.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>
2020-03-24 13:18:47 +00:00
Karl Palsson 1688807f18 net/pagekitec: Update to newest version
Drops a patch, adds support for a status file for health tracking.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>
2020-03-24 13:18:28 +00:00
Hannu Nyman 407438796b Merge pull request #11647 from jefferyto/byobu-5.133-openwrt-19.07
[openwrt-19.07] byobu: Update to 5.133
2020-03-23 21:11:09 +02:00
Hannu Nyman 97e68c1cbd Merge pull request #11646 from jefferyto/python-pyasn1-modules-0.2.8-openwrt-19.07
[openwrt-19.07] python-pyasn1-modules: Update to 0.2.8
2020-03-23 21:10:54 +02:00
Hannu Nyman 3c6d37bfa3 Merge pull request #11645 from jefferyto/python-idna-2.9-openwrt-19.07
[openwrt-19.07] python-idna: Update to 2.9
2020-03-23 21:10:36 +02:00
Hannu Nyman 72ccf67264 Merge pull request #11644 from jefferyto/python-pycparser-2.20-openwrt-19.07
[openwrt-19.07] python-pycparser: Update to 2.20
2020-03-23 21:10:12 +02:00
Hannu Nyman 2c86818705 Merge pull request #11643 from jefferyto/python-enum34-1.1.10-openwrt-19.07
[openwrt-19.07] python-enum34: Update to 1.1.10
2020-03-23 21:09:57 +02:00
Hannu Nyman 897b76d324 Merge pull request #11641 from jefferyto/python-zope-interface-4.7.2-openwrt-19.07
[openwrt-19.07] python-zope-interface: Update to 4.7.2, refresh patch
2020-03-23 21:09:08 +02:00
Hannu Nyman 72731c08c8 Merge pull request #11639 from jefferyto/python-twisted-security-fix-openwrt-19.07
[openwrt-19.07] python-twisted: Fix several request smuggling attacks
2020-03-23 21:08:12 +02:00
Hannu Nyman 7fa2405217 Merge pull request #11636 from jefferyto/golang-1.13.9-openwrt-19.07
[openwrt-19.07] golang: Update to 1.13.9
2020-03-23 21:04:56 +02:00
Jeffery To 34a77ee37a byobu: Update to 5.133
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 847d9f18cc)
2020-03-24 01:55:00 +08:00
Jeffery To db63e12089 python-pyasn1-modules: Update to 0.2.8
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit a6f1e7689b)
2020-03-24 01:49:04 +08:00
Jeffery To 4da9026f2a python-idna: Update to 2.9
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 111d7ae088)
2020-03-24 01:40:32 +08:00
Jeffery To a6b32c675c python-pycparser: Update to 2.20
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 931dcfe3aa)
2020-03-24 01:34:49 +08:00
Jeffery To 364c24dd2b python-enum34: Update to 1.1.10, refresh patch
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 48af5b2abb)
2020-03-24 01:27:22 +08:00
Jeffery To da05e08291 python-enum34: Update to 1.1.9, refresh patch
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 87150b43a8)
2020-03-24 01:26:52 +08:00
Jeffery To 4e5642de1a python-zope-interface: Update to 4.7.2, refresh patch
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit a178662fce)
2020-03-24 01:08:08 +08:00
Jeffery To 261d6cbaaa python-twisted: Fix several request smuggling attacks
This backports a patch[1] to fix several request smuggling attacks.

This includes fixes for:
* CVE-2020-10108
* CVE-2020-10109

[1]: https://github.com/twisted/twisted/commit/4a7d22e490bb8ff836892cc99a1f54b85ccb0281

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-03-23 23:22:39 +08:00
Jeffery To 0b654d52e9 golang: Update to 1.13.9
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-03-23 21:55:51 +08:00
Josef Schlehofer 8677a0e3e5 libredblack: pass CFLAGS properly
Fixes build with enabled ASLR PIE

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit a615a821d9)
2020-03-23 12:32:11 +01:00
Hannu Nyman ad782ffff6 Merge pull request #11615 from stangri/19.07-https-dns-proxy
[19.07] https-dns-proxy: support for dnsmasq noresolv option
2020-03-21 09:47:01 +02:00
Rosen Penev fc16e964c0 Merge pull request #11617 from nxhack/19_07_icu_66_1
[openwrt-19.07] icu: update to 66.1 & fix CVE-2020-10531
2020-03-20 16:01:09 -07:00
Stan Grishin 6abb6bb2a0 https-dns-proxy: support for dnsmasq noresolv option
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-03-20 21:22:39 +00:00
Hirokazu MORIKAWA 2509b0e894 icu: update to 66.1
ICU 66 updates to Unicode 13, including new characters, scripts, emoji, and corresponding API constants. It also updates to CLDR 36.1 with Unicode 13 updates and bug fixes.

Create symbolic link to current version.

FIX CVE-2020-10531
 An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2020-03-19 16:26:30 +09:00
Josef Schlehofer df7e27dfed youtube-dl: update to version 2020.3.8
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5d565db222)
2020-03-19 00:07:19 +01:00
Karel Kočí 0b81029405 haveged: move init script from 13 to 01
This is intended as a match with standard urngd. They serve same purpose
and urngd starts as first with 00. Starting haveged later can create
issues if you replace urngd with it. The example problem is if
uci-defaults script decides to generate certificate. Haveged can supply
entropy but it is started later and to mitigate this urngd would still
have to be installed. This means that haveget can't serve as replacement
without moving it to match start order of urngd.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry picked from commit 1ef38f45d9)
2020-03-17 08:53:35 +01:00
Rosen Penev 2085b990ff libarchive: update to 3.4.2
Switch to normal tarballs. Remove autoreconf as a result.

Several Makefile cleanups for consistency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c22dd1bf74)
2020-03-16 22:20:43 +01:00
Hannu Nyman 8bd2d5e538 Merge pull request #11566 from BKPepe/python3-update-19.07
[19.07] python3: update to version 3.7.7
2020-03-16 20:22:12 +02:00
Yousong Zhou f043afe468 openvswitch: fix PIE build against 4.14 kernel
Reported-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Ref: https://github.com/openwrt/packages/pull/11567
(cherry picked from commit e9d6414437)
2020-03-16 15:30:22 +08:00
Josef Schlehofer 5827a1ed2c x264: add CONFIGURE_VARS and MAKE_FLAGS when NASM is not selected
- Remove dot in TITLE
- Use HTTPS in URL

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit faac2352e2)
2020-03-15 22:08:40 +01:00
Rosen Penev 5746e4a2b3 nfs-kernel-server: Fix compile with uClibc-ng
NS_MAXMSG is not defined.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 732b1c4c0e)
2020-03-14 17:36:20 -07:00
Martin Schiller 17924b1283 xtables-addons: disable ASLR PIE
This package uses ld for linking and therefor does not support the
-specs option.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>
(cherry picked from commit 3804006e60)
2020-03-14 02:51:44 +01:00
Josef Schlehofer fd4da96672 python3: update to version 3.7.7
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-03-14 00:47:42 +01:00
Alexandru Ardelean 3b9648db39 django: bump to version 1.11.29
Includes several CVE fixes.
- CVE-2020-7471 in 1.11.28
- CVE-2020-9402 in 1.11.29

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2020-03-11 09:28:32 +02:00
Rosen Penev 55176058f5 Merge pull request #11540 from neheb/softee
[19.07]softethervpn: Update to rtm version 4.29-9680
2020-03-10 20:29:30 -07:00
Rosen Penev dc524aa2aa softethervpn: disable PIC
Compilation is broken on AArch64.

Reordered some things for consistency between packages.

Fixed license information.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b8b4e7e269)
2020-03-09 13:57:45 -07:00
Rosen Penev 381153d597 softethervpn: Fix openssl header patch
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 41fe5a8335)
2020-03-09 13:57:32 -07:00
Rosen Penev aba0dd8729 softethervpn: Add missing OpenSSL header
Fixes compilation without OpenSSL deprecated APIs as well as
-Werror=implicit-function-declaration.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b80b614f8f)
2020-03-09 13:57:12 -07:00
Philipp Schuster f09028fcdb softethervpn: Update to rtm version 4.29-9680
Update SoftEther VPN to the latest rtm version 4.29-9680

Compile tested: Atheros AR7xxx/AR9xxx, TP-LINK Archer C7 v2, 18.06.4

Signed-off-by: Philipp Schuster <philippschuster@gmx.com>
(rebased and refreshed patches).
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 34db38520b)
2020-03-09 13:56:40 -07:00
Rosen Penev b546ff127c stubby: fix init script
The configuration file was not being generated.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b95699c647)
2020-03-09 13:55:24 -07:00
Rosen Penev c5219c8af3 stubby: makefile and init script cleanup
Reordered Makefile according to
https://github.com/openwrt/packages/pull/9399#issuecomment-508727872 .

Added PKG_BUILD_PARALLEL for faster compilation.

Remove duplicated conffiles section.

Install /etc/config/stubby using INSTALL_CONF, as is done elsewhere

Run init script through shellcheck and clean it up.

Added chmod for the stubby config file, to fix a LuCI issue.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit eaf5225323)
2020-03-09 13:55:23 -07:00
Karel Kočí 9b64ae0bad btrfs-progs: fix check for btrfs in btrfs scan
The previous implementation always succeeded so no scan was performed.
This now fixes that and it correctly scans for BTRFS  devices if BTRFS
support is in kernel.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
2020-03-09 15:29:16 +01:00
Josef Schlehofer 2f5fce8209 syslog-ng: update to version 3.26.1
- Bump version also in the config file
- Move logread to /sbin location instead of /usr/sbin
Because package logd in OpenWrt's ubox Makefile uses /sbin folder and LuCI has
the same path hardcoded in
modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json and using
different location results that LuCI is not able to load log data as it
is not found.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit fe165eeb94)
2020-03-08 07:54:25 +01:00
Hannu Nyman 79186664e2 Merge pull request #11526 from wvdakker/openwrt-19.07
[Openwrt 19.07] Shorewall: Bump to 5.2.3.7
2020-03-07 15:51:09 +02:00
Rosen Penev 43c5aba9e6 Merge pull request #11524 from micmac1/1907arc_aio2
[19.07] mariadb: add dependency on libaio for arc as well
2020-03-07 02:18:23 -08:00