Commit Graph

5939 Commits

Author SHA1 Message Date
Rosen Penev e5f75f5009 Merge pull request #12499 from Andy2244/softethervpn5-9674-(19-07)
[19.07] Softethervpn5: update to 5.01.9674
2020-06-13 14:37:21 -07:00
Andy Walsh b61848fd0f wsdd2: update to git 2020-05-06
* update to git 2020-05-06
* run init script through shellcheck
* fix infinite loop when BI_PARM is never set
* Fix '-b' option parsing

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-06-13 23:26:25 +02:00
Stan Grishin de09918aca simple-adblock: racially-neutral names
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-06-13 20:39:11 +00:00
Eric Luehrsen 5fcf2cb092 unbound: make option interface_auto default on
Unbound has a quirk and may reply on a different device address.
When Unbound answers with from-address different than it
received queries on, it may cause trouble for select VPN and
firewall configurations. Ensure Unbound replies with the same
address by changing this default.

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2020-06-13 15:16:51 -04:00
David Bauer 950646f6c0 unbound: bump PKG_RELEASE
Fixes commit da76aeb24c ("unbound: expose interface-auto to UCI")

Signed-off-by: David Bauer <mail@david-bauer.net>
2020-06-13 15:16:50 -04:00
Eric Luehrsen ba19244b84 unbound: suggest matched domain option for dnsmasq link
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2020-06-13 15:16:50 -04:00
Andy Walsh 72b0ea4b5d samba4: update to 4.11.9
* update to 4.11.9
* remove merged upstream patches
* disable netbios port 139 on 'DISABLE_NETBIOS' option or missing 'nmbd'
* fixes CVE-2020-10700, CVE-2020-10704

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-06-13 20:39:26 +02:00
Andy Walsh d88405ba84 ksmbd: update to 3.2.0, ksmbd-tools: update to 3.2.6
* ksmbd: update to 3.2.0
* ksmbd-tools: update to 3.2.6
* refresh patch

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-06-13 20:36:06 +02:00
Andy Walsh 1a0db6a217 softethervpn5: update to 5.01.9674
* update to 5.01.9674

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-06-13 20:29:55 +02:00
Dirk Brenken c0dce1d3a6 adblock: update 4.0.6
* add anti_ad blocklist source
* made SafeSearch provider configurable, you can limit
  SafeSearch to certain providers
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit e5ab2de1ff)
2020-06-13 08:36:08 +02:00
Dirk Brenken 982e7e2fa2 adblock: update 4.0.5-5
* add regional list source for czech/slovak
* add regional list source for korea
* adapt oisd_nl changes, switch to adb-syntax domains

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 0a5e61ecb6)
2020-06-11 16:30:11 +02:00
Stan Grishin 53fc73b57e simple-adblock: remove obsolete dshield.org links from config
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-06-08 17:35:48 +00:00
Jan Hak e667100a92 knot: update to version 2.9.5
Removed patch
`03-configure-allow-to-manually-disable-POSIX-capabiliti.patch` that has been backported into release.

Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 9d81b6e4ca)
2020-06-06 22:30:41 +02:00
Josef Schlehofer aef8cb50ff knot: disable libcap-ng
Recently, there was added libcap-ng to OpenWrt packages feed,
which is optional for Knot DNS. It enables POSIX 1003.1e capabilities.
This can restrict root (by default it runs as root) permissions and
might harm and as there isn't systemd on OpenWrt it can interfere.

There is an added patch, which introduced an option to disable libcap-ng.
This will be part of the next release.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 41957d6967)
2020-06-06 22:30:32 +02:00
Jan Hak 550fa7c286 knot: update to version 2.9.3
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 87d6c26c73)
2020-06-06 22:30:16 +02:00
Paulo Machado 1fe19e712f linuxptp: fix build failure
Build is failing because HWTSTAMP_TX_ONESTEP_P2P is defined anymore on
linux net_tstamp.h.

Moreover, the usual way of linuxptp build is looking for system includes
unless user defines differently. That also was tried to fix.

PKG_RELEASE bumped to 3.

Signed-off-by: Paulo Machado <pffmachado@yahoo.com>
(cherry picked from commit 5f64b2d1e4)
2020-06-05 21:43:10 -07:00
Gabor Seljan 267b490878 sslh: use tls option instead of deprecated ssl
Upstream will drop support for the ssl option in the next future version.

Signed-off-by: Gabor Seljan <sgabe@users.noreply.github.com>
(cherry picked from commit 46c253dfca)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[package bump]
2020-06-05 21:59:59 +02:00
Rosen Penev 8f935f38bf Merge pull request #12361 from rs/nextdns-1.6.4-openwrt-19.07
[19.07] nextdns: Update to version 1.6.4
2020-06-05 12:23:37 -07:00
Hannu Nyman b934e4b41c Merge pull request #12334 from stangri/19.07-simple-adblock
[19.07] simple-adblock: bugfix: proper error reporting on failed downloads; lists update script
2020-06-03 18:21:49 +03:00
David Bauer e760909455 unbound: expose interface-auto to UCI
This exposes the interface-auto option to UCI.

By default, interface-auto is disabled.
This leads to the DNS reply possibly originating from
a different address then the request was sent to.

Devices with a packet filter might not receive the reply in this case.

Enabling interface-auto ensures the reply is sent with the
source-address the request was sent to.

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit da76aeb24c)
2020-06-03 16:10:54 +02:00
Karl Palsson 2358915938 net/mosquitto: bump to 1.6.10
Full changelog at: https://mosquitto.org/blog/2020/05/version-1-6-10-released/

Fixes openssl 3.0 support,
Minor fixes, nothing standout as applicable specifically to OpenWrt.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2020-06-02 10:26:47 +00:00
Rosen Penev 620838fc91 ola: fix compilation with GCC4
The configure script confusingly sets CXXFLAGS to gnu++11 but does
not use that to check the important stuff. Fix that.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8f7687833e)
2020-05-31 14:02:47 -07:00
Dirk Brenken c09244b012 adblock: update 4.0.5-4
* remove dumb list cache
* start adblock processing after adding/removing
  list sources via CLI
* add regional list source for france

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit ab44d8146a)
2020-05-31 18:31:26 +02:00
Olivier Poitrey f0fd4c1512 nextdns: Update to version 1.6.4
Refactor the package so init script is installed from the binary instead
of an init script embedded in the package.

Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-05-31 00:18:32 -07:00
Dirk Brenken 45313e42f9 adblock: update 4.0.5-3
* fix oisd_nl source parser (format has been changed)
* enable safesearch support for kresd (ip based)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 7f6763359c)
2020-05-30 06:15:02 +02:00
Rosen Penev 6e27e51969 Merge pull request #12348 from adrianschmutzler/fixmake
[19.07] treewide: use relative include paths for python Makefiles
2020-05-28 19:11:38 -07:00
Rosen Penev a9b5867e29 Merge pull request #12294 from neheb/keab
[19.07] backport kea changes
2020-05-28 15:17:01 -07:00
Jeffery To d85c355aa1 treewide: use relative include paths for python Makefiles
This updates the include paths for python(3)-package.mk to be relative
to the package Makefile. If not, in certain cases this will print errors
like the following one:

ERROR: please fix feeds/openwrt/net/freeradius3/Makefile
   - see logs/feeds/openwrt/net/freeradius3/dump.txt for details

In the dump.txt there is the following:

Makefile:42: /mylocalpath/feeds/packages/lang/python/python3-package.mk: No such file or directory
make[1]: *** No rule to make target '/mylocalpath/feeds/packages/lang/python/python3-package.mk'.  Stop.

The relative path is used already in 19.07 for most of the packages, and
has been updated for the packages at hand in master as well:

302f4d17e3 ("libmraa,libupm: Disable default Python package build recipe")
1bc2f4f3c6 ("treewide: Remove Python variants for non-Python packages")

Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
2020-05-28 15:57:01 +02:00
Jan Pavlinec 615d909a22 transmission: init script check syscall list for seccomp
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-05-27 11:26:36 +02:00
Stan Grishin 18efcda210 simple-adblock: bugfix: proper error reporting on failed downloads; lists update script
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-05-27 00:26:13 +00:00
Rosen Penev d5062122ef Merge pull request #12292 from neheb/spoof
[19.07] spoofer backports
2020-05-26 14:08:58 -07:00
Olivier Poitrey 6e6e5fa2ad nextdns: Update to version 1.6.3
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-05-26 19:31:36 +00:00
Olivier Poitrey 474296dcb1 nextdns: Update to version 1.6.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-05-26 17:58:33 +00:00
Aleksander Morgado ede1a8221b modemmanager: set interface MTU based on bearer settings
Using the same method used by other protocol handlers like uqmi.

Fixes https://github.com/openwrt/packages/issues/11383

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit 41552c1cc2)
2020-05-26 10:28:56 +02:00
Rosen Penev 5a1699aebd kea: do not build static host binaries
Errors on some systems. No real change.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1950340c69)
2020-05-24 19:47:13 -07:00
Tiago Gaspar bb42a250b4 kea: Update kea to the latest stable verion (1.6.2).
Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 0f4cc2e339)
2020-05-24 19:47:00 -07:00
Rosen Penev 1d30a273e1 kea: Remove openssl host dependency
OpenSSL is already built as part of tools (LibreSSL actually) and can be
used instead for the host build.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c037c8d988)
2020-05-24 19:46:50 -07:00
Tiago Gaspar f22e122e64 kea: update package to 1.6.0
Update kea to the latest stable verion (1.6.0).

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 03cf093332)
2020-05-24 19:46:39 -07:00
Tiago Gaspar 6f19b894d6 kea: remove dependency and reduce file size
Remove boost-python3 dependency and reduce file size of the compiled
kea-libs

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 74603fe5ea)
2020-05-24 19:46:30 -07:00
Tiago Gaspar 87f4d6ba2c kea: fix kea-admin dependency
Fix kea-admin dependency where if procps-ng-ps wasn't available busybox
would output an error casuse it does't support showing a processe's PID

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 9314a96765)
2020-05-24 19:46:22 -07:00
Tiago Gaspar 1360d1f88c kea: fix and improve makefile
Fix an issue where the Makefile wouldn't allow kea to show up in the
menuconfig Also added some description to the packages

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 95307f2a4b)
2020-05-24 19:46:13 -07:00
Rosy Song 07538f535a kea: remove python3 dependency of kea-admin
fix #9495

Signed-off-by: Rosy Song <rosysong@rosinson.com>
(cherry picked from commit 444420423f)
2020-05-24 19:46:07 -07:00
Rosen Penev efde7c454e kea: Fix compilation without deprecated OpenSSL APIs
Forgot to add this one to the last pull request.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 54d7bc119d)
2020-05-24 19:45:58 -07:00
Rosen Penev 09ea6f0325 kea: Don't install to STAGING_DIR_HOST
STAGING_DIR_HOST is for packages under tools/ , not host packages.

Reorganized Makefile for consistency between packages.

Added PKG/HOST_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d93fd61d62)
2020-05-24 19:45:50 -07:00
Rosen Penev fb58e3b8c4 spoofer: remove host build + cleanups
The host build is not used by anything.

Added PKG_INSTALL for consistency between packages.

Added PKG_BUILD_PARALLEL for faster compilation.

Added missing protobuf/host build dependency. This was previously
specified as a host dependency, which is wrong.

Removed pointless std parameter.  It's only useful for old G++ versions.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 63107fa8c0)
2020-05-24 19:38:43 -07:00
Rosen Penev deccad8925 spoofer: Update to 1.4.5
Needed for the new protobuf update.

Cleaned up Makefile.

Got rid of HOST_BUILD_DEPENDS. This package does not have a host build.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4c42eb0b45)
2020-05-24 19:38:34 -07:00
Dirk Brenken 15257f5b6d adblock: limit domain name length
* limit domain name length to max. 63 chars
  to fix issues with energized sources

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 0b6ea12560)
2020-05-24 21:49:26 +02:00
Dirk Brenken c8d2ed2cbc adblock: release 4.0.5
* update energized source urls, add ultimate variant
* switch shalla source to http (invalid server certificate)
* add another stevenblack source variant (normal / porn)
* small cornercase fixes
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit c9f91ecc47)
2020-05-23 21:21:54 +02:00
Rosen Penev a41e068db8 sslh: update to 1.20
Fixed maintainer entry.

Added patch fixing compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ded3ad41b8)
2020-05-21 17:28:35 -07:00
Josef Schlehofer 49ac1e8b74 bind: update to version 9.14.12
Fixes:
CVE-2020-8616
CVE-2020-8617

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-05-20 11:25:23 -07:00