Commit Graph
16515 Commits
Author SHA1 Message Date
Jan Pavlinec 345cb18d4c tor: update to version 0.4.2.8 (security fix)
Fixes
CVE-2020-15572

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-07-21 14:49:29 +02:00
Rosen PenevandJosef Schlehofer da4a052962 mocp: disable ffmpeg
The recent update to ffmpeg broke this.

Instead, use the relevant libraries separately.

Added AAC support. AAC is very common and was recently fixed to be
compatible with BUILD_PATENTED.

Explicitly pass all configure arguments, to avoid future breakage.

Remove autoreconf. autotools files are not being patched.

Add PKG_BUILD_PARALLEL for speed.

Other minor cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit dd77091337)
2020-07-21 13:46:06 +02:00
Rosen Penev 9b0e858c0e mpd: update to 0.21.25
pulseaudio-daemon depends on alsa-lib, which depends on @AUDIO_SUPPORT.
Enables -full on platforms lacking AUDIO_SUPPORT.

Simplified LDFLAGS slighly.

Removed pointless ICU dependency. I managed to patch meson.build to fix
iconv compilation. The original error was that without the header, it
was prefixing the iconv check with __buildin_ , which does not work
with uClibc-ng.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-20 23:21:40 -07:00
Ian CooperandRosen Penev 7b269ec49d dovecot: remove incorrect PKG_BUILD_DEPENDS
The package Makefile contains a PKG_BUILD_DEPENDS=libiconv
line, which apart from being incorrect if libiconv-full is
specified in the build configuration, is also unnecessary,
since the package Makefile already includes nls.mk which
sets PKG_BUILD_DEPENDS appropriately.

Signed-off-by: Ian Cooper <iancooper@hotmail.com>
(cherry picked from commit 645bea6d88)
2020-07-20 17:14:56 -07:00
Rosen Penev 14c248274b faad2: update to 2.9.2
Removed upstreamed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ad1203ebb9)
2020-07-20 16:55:48 -07:00
Rosen Penev f593c37cd7 xz: update to 5.2.5
Switched to smaller xz archive.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8c5d0c673d)
2020-07-20 16:51:41 -07:00
Rosen Penev 97842ae445 zstd: fix compilation without host distutils
This is the case in debian.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ec3798645d)
2020-07-20 16:50:23 -07:00
Rosen Penev 00f29de5f8 zstd: update to 1.4.5
Switch to zst archives for smaller size.

Removed patches in favor of a better solution for uClibc-ng.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8c23fef9da)
(changed to gz since 19.07 has no zstd support)
2020-07-20 16:49:24 -07:00
Rosen Penev 1dc0c3b798 zstd: remove lto and as-needed flags
The former can be implemented as a meson argument.

The latter is already default.

No compiled difference, therefore no PKG_RELEASE bump.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3c9dbc1429)
2020-07-20 16:47:37 -07:00
Rosen Penev 01abd5d37b zstd: convert to meson
Allows faster build with ninja. Unfortunately, the LTO stage slows it
massively.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 779a4dca67)
2020-07-20 16:47:06 -07:00
Rosen Penev 6ae076fd14 aria2: Build with MIPS16
All the computationally expensive stuff is in the libraries, not the
package itself.

Saves several kilobytes.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit a5e7d0a904)
2020-07-20 16:40:07 -07:00
Xingwang LiaoandRosen Penev 2cdf132b94 aria2: Update to 1.35.0
* remove OpenSSL patch, it has already merged to the source.

Signed-off-by: Xingwang Liao <kuoruan@gmail.com>
(cherry picked from commit 2384acdc9d)
2020-07-20 16:40:07 -07:00
Rosen Penev 5200d6449f libvorbis: update to 1.3.7
Switched to CMake for the faster compilation and the simpler Makefile.

Minor Makefile cleanups.

Before:

time make package/libvorbis/compile -j 12
Executed in   24.40 secs   fish           external
   usr time   21.17 secs    0.00 micros   21.17 secs
   sys time    3.05 secs  426.00 micros    3.05 secs

After:

time make package/libvorbis/compile -j 12
Executed in    9.19 secs   fish           external
   usr time   11.29 secs    0.00 micros   11.29 secs
   sys time    1.43 secs  421.00 micros    1.43 secs

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0ef247cf5d)
2020-07-20 16:38:54 -07:00
Josef Schlehofer e798f539c9 msmtp: update to version 1.8.11
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit dd44bf2e7a)
2020-07-20 16:28:45 +02:00
Josef Schlehofer 780c453772 msmtp: update to version 1.8.10
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e193db6b69)
2020-07-20 16:28:39 +02:00
Josef Schlehofer 0821c5001e squid: update to version 4.12
- Fixes CVEs:

CVE-2019-12519
CVE-2019-12520
CVE-2019-12521
CVE-2019-12523
CVE-2019-12524
CVE-2019-12525
CVE-2019-12526
CVE-2019-12527
CVE-2019-12528
CVE-2019-12529
CVE-2019-12824
CVE-2019-12854
CVE-2019-13345
CVE-2019-18676
CVE-2019-18677
CVE-2019-18678
CVE-2019-18679

CVE-2020-8449
CVE-2020-8450
CVE-2020-11945
CVE-2020-14058
CVE-2020-15049

- Remove patch for cross-compilation
The patch should not be included in the OpenWrt at all without any
commit message/description.
Is not needed and there should be used HOST variables instead of BUILD variables (e.g.
   HOSTCXX)
However, the BUILDCXX is set in Makefile to HOSTCXX

- Renumber glibc patch and refresh it

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 3401e29aa7)
2020-07-20 16:26:45 +02:00
Jonathan ElchisonandJosef Schlehofer 5658fd93f8 squid: fix 'localhet' typo in squid.conf
Signed-off-by: Jonathan Elchison <JElchison@Gmail.com>
(cherry picked from commit 2ba6546dd8)
2020-07-20 16:26:08 +02:00
Rosen PenevandJosef Schlehofer 3b285bfaaa quasselc: fix compilation with newer glib2
Needed to fix LDFLAGS variable.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 030cc5570c)
2020-07-20 16:04:39 +02:00
Rosen PenevandJosef Schlehofer 2c6155c9c3 gkrellmd: update to 2.3.11
Added nls.mk as this is now required.

Fixed license information.

Several small fixes and cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4426e4c69b)
2020-07-20 16:03:33 +02:00
Rosen PenevandJosef Schlehofer fa49751a8b sumo: Update to 1.3.1
Converted to CMake for simplicity.

Added upstream patch to use sleep_for instead of deprecated usleep.

Added patch to fix compilation with musl.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit a9abe60ef4)
2020-07-20 13:48:27 +02:00
Rosen PenevandGitHub de41dcbf27 Merge pull request #12881 from jefferyto/python3-backport-patches-openwrt-19.07
[openwrt-19.07] python3: Backport security fixes
2020-07-20 03:24:29 -07:00
Jeffery To ddb0af4061 python3: Backport security fixes
This backports fixes for security issues, including:
* CVE-2020-14422: Hash collisions in IPv4Interface and IPv6Interface
* CVE-2019-20907: Infinite loop in the tarfile module

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-07-20 17:39:42 +08:00
Rosen PenevandGitHub cf03cb1806 Merge pull request #12877 from jefferyto/golang-1.13.14-openwrt-19.07
[openwrt-19.07] golang: Update to 1.13.14
2020-07-19 14:40:04 -07:00
Jeffery To 1a527963c9 golang: Update to 1.13.14
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-07-20 03:11:51 +08:00
Hannu Nyman 54b76dfd7d haveged: update to 1.9.13
Update haveged to version 1.9.13.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 28cf201290)
2020-07-18 14:15:11 +03:00
Josef Schlehofer 984a32fff2 libvorbisidec: update to version 20180319
Fixes CVE-2018-5147

- Change PKG_SOURCE_URL
fatal: unable to access 'https://git.xiph.org/tremor.git/': Failed to connect to git.xiph.org port 443: Connection refused
because they changed the URL of the repository
- Removes PKG_SOURCE_SUBDIR and PKG_SOURCE
Those are already defaults
- Fix indentation in description

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 406d0d9f3f)
2020-07-17 11:10:19 +02:00
Josef Schlehofer fb687b5420 dnscrypt-proxy2: update to version 2.0.44
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 01ff758894)
2020-07-17 11:10:06 +02:00
Josef SchlehoferandGitHub 4c2ecb413e Merge pull request #12676 from BKPepe/bind-openwrt19.07
[19.07] bind: update to version 9.16.x
2020-07-16 10:18:36 +02:00
Yousong Zhou 5ed85c0389 openvswitch: bump to version 2.11.3
Two patches were backported to fix issue openwrt/packages#12737

  0002-compat-Fix-ipv6_dst_lookup-build-error.patch
  0003-compat-Backport-ipv6_stub-change.patch

One was deleted as it is now part of 2.11.3

  0005-datapath-conntrack-fix-include-for-IP6_DEFRAG_CONNTR.patch

Other patches refreshed

Reported-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-07-14 20:06:44 +08:00
Rosen PenevandGitHub 67755a8ea6 Merge pull request #12732 from TDT-AG/pr/20200706-mwan3
mwan3: sync with master branch
2020-07-12 17:59:25 -07:00
Rosen PenevandGitHub a9045767b0 Merge pull request #12767 from jonathanunderwood/openwrt-19.07
[19.07] stubby: remove libbsd dependency and fix compilation with deprecated OpenSSL APIs
2020-07-08 23:04:26 -07:00
Rosen PenevandJonathan G. Underwood 6a0eeda77f getdns: fix compilation without deprecated OpenSSL APIs
Since DSA is enabled, dsa.h is needed. Normally this header is included
implicitly with engine.h but with OPENSSL_API_COMPAT >= 0x10100000L ,
this is not so.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-09 06:49:30 +01:00
Rosen PenevandJonathan G. Underwood 805c1344e5 getdns: properly remove libbsd support
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-09 06:49:30 +01:00
Rosen PenevandGitHub 5c4ead1f12 Merge pull request #12756 from jefferyto/python3-maxminddb-fix-build-openwrt-19.07
[openwrt-19.07] python3-maxminddb: Fix build when using newer setuptools
2020-07-08 11:04:23 -07:00
Rosen PenevandGitHub dfeb14462d Merge pull request #12755 from jefferyto/python-host-platform-openwrt-19.07
[openwrt-19.07] python3: Use default _PYTHON_HOST_PLATFORM
2020-07-08 11:03:38 -07:00
Peter Wagner cc0eb59f42 ntpd: update to version 4.2.8p15 (security fix)
Fixes:
CVE-2020-11868
CVE-2018-8956
CVE-2020-13817
CVE-2020-1502

Signed-off-by: Peter Wagner <tripolar@gmx.at>
2020-07-08 19:11:22 +02:00
Jeffery To fe32da0841 python3-maxminddb: Fix build when using newer setuptools
This package fails to build with newer setuptools, because setuptools
removed the (deprecated) Features feature in v46.0.0[1].

This adapts a commit[2] to remove the use of this feature. (Changes to
code formatting prevent the original commit/patch to be used.)

[1]: https://github.com/pypa/setuptools/blob/aff64ae89e00e25fb3868bf528a14c18e7af0cf4/CHANGES.rst#v4600
[2]: https://github.com/maxmind/MaxMind-DB-Reader-python/commit/3aac426e354f91814f6fd0829baee137b0bb093f

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-07-08 17:30:57 +08:00
Jeffery To 4b0c1f8714 python3: Use default _PYTHON_HOST_PLATFORM
This lets the Python build process set _PYTHON_HOST_PLATFORM instead of
forcing an explicit value.

Also:

* Save the target _PYTHON_HOST_PLATFORM value during Build/InstallDev
  for use when building target Python packages (in python3-package.mk).

* Use the (mostly) default PYTHON_FOR_BUILD value, instead patch
  configure to remove the platform triplet from the sysconfigdata file
  name.

* Remove the "CROSS_COMPILE=yes" make variable (there is no indication
  that this variable is necessary).

* Force host pip to build packages from source instead of downloading
  binary wheels.

  Previously, host pip can download universal (platform-independent)
  wheels but not platform-specific wheels, because of the custom
  _PYTHON_HOST_PLATFORM value. (Packages that do not have universal
  wheels would be compiled from source.)

  With a correct _PYTHON_HOST_PLATFORM, host pip can install
  platform-specific wheels as well. However, the pre-built shared object
  (.so) files in these wheels will have the host's platform triplet in
  their file names. When target Python packages are built (using the
  target's _PYTHON_HOST_PLATFORM), Python will not use these shared
  object files.

  By forcing host pip to build packages from source, the built shared
  object files will not have the platform triplet in their file names.
  (Host Python has been patched to remove the platform triplet from file
  names.) This allows these packages to be used when building target
  Python packages.

  (The net effect of this complete change is that platform-dependent
  packages will continue to be compiled from source, while
  platform-independent packages will now also be compiled from source.)

Fixes https://github.com/openwrt/packages/issues/12680.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-07-08 17:12:33 +08:00
Rosen PenevandGitHub e1846e05e3 Merge pull request #12722 from jonathanunderwood/openwrt-19.07-getdns-1.6.0
[19.07] getdns: update to version 1.6.0
2020-07-06 15:37:16 -07:00
Michiel BlokzijlandFlorian Eckert 86d2bfe022 mwan3: Fix mwan3 start not doing anything Due to a missing config load function call, mwan3 start runs ifup for an empty list of interfaces, thus not calling ifup at all.
This commit introduces the missing config_load call.

Signed-off-by: Michiel Blokzijl <code@m01.eu>
(cherry picked from commit acfbd98ce0)
2020-07-06 08:58:45 +02:00
Florian Eckert b74d5e9c17 mwan3: update version to 2.8.7
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 8030814267)
2020-07-06 08:58:45 +02:00
Florian Eckert 4f394c2590 mwan3: set status to unknown in rpcd if status file not found
If the status file is not found then set then return the value unknown.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit e30f16beef)
2020-07-06 08:58:45 +02:00
Florian Eckert f7749c663b mwan3: switch to procd init script
This enables the procd handling for mwan3 on config change.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit a6dc75428c)
2020-07-06 08:58:45 +02:00
Aaron GoodmanandFlorian Eckert 0498a2b357 mwan3: address reviewer comments on 5147dfc7
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit 38be40843b)
2020-07-06 08:58:45 +02:00
Aaron GoodmanandFlorian Eckert cc1bb3e8b9 mwan3: Use /128 for ipv6 if no other source address was found
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit 4efaa44b21)
2020-07-06 08:58:45 +02:00
Aaron GoodmanandFlorian Eckert 74b6f10845 mwan3: Allow user to specify rules based on source interface
Add an option for adding rules based on source interface.
The default 0.0.0.0/0 src and destination ip addresses has been removed. It is unclear
how the 'any' family of rules would have worked, as it appears each rule always required an
ipv4 or ipv6 address src and destination address.  With this change, the any family will work
again.

I also cleaned up a bunch of repeated code around adding the iptables rules for
ipv4/ipv6/any in making the change.

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit 5147dfc73a)
2020-07-06 08:58:45 +02:00
Aaron GoodmanandFlorian Eckert c14e74a5a8 mwan3: Do not mangle outgoing ipv6 pings
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit cf38136b00)
2020-07-06 08:58:45 +02:00
Aaron GoodmanandFlorian Eckert 465baa46c3 mwan3: version bump to 2.8.6
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit b7d1f81f10)
2020-07-06 08:58:45 +02:00
Aaron GoodmanandFlorian Eckert 19bebd3d89 mwan3: force busybox ping
openwrt 19.07 uses iputils 20101006-1

This ancient version of iputils has a bug where the -I option is not respected.

https://github.com/iputils/iputils/issues/55
https://github.com/iputils/iputils/issues/56
https://bugs.openwrt.org/index.php?do=details&task_id=1486

Thus, we should force using busybox ping at "/bin/ping" until the iputils
version gets an upgrade in the next major release

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit 35a86bdc11)
2020-07-06 08:58:45 +02:00
Aaron GoodmanandFlorian Eckert ffce45e365 mwan3: don't add ipv6 link local address to routing tables
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit aafdd0730c)
2020-07-06 08:58:45 +02:00