Commit Graph

16759 Commits

Author SHA1 Message Date
Florian Eckert 6154afb3cf stunnel: fix some shellcheck warnings
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry-picked from 6713d1d771)
2019-09-26 19:36:24 -07:00
Florian Eckert 1a93b5512f stunnel: update version to 5.55
Update version to 5.55

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry-picked from a17e90591c)
2019-09-26 19:36:23 -07:00
Sven Eckelmann 186dc60443 ap51-flash: upgrade package to latest release 2019.0
* improved Zyxel firmware detection
* introduced optional MAC address filtering
* added support for:

  - Plasma Cloud PA300
  - Plasma Cloud PA1200
  - Plasma Cloud PA2200

Signed-off-by: Sven Eckelmann <sven@narfation.org>
(cherry-picked from 22062b10c6)
2019-09-26 19:36:23 -07:00
Luiz Angelo Daros de Luca 8f2dccc568 hplip: bump to 3.19.6
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry-picked from fdeb5f8171)
2019-09-26 19:36:23 -07:00
Rosen Penev e02387b95e geth: Update to 1.9.1
Remove Upstreamed patch.

Minor cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 03b1d7c4d4)
2019-09-26 19:36:23 -07:00
Rosen Penev 07f47d6ea5 jamvm: Add host build
Needed for classpath. GCJ is also needed but that can be dealt with
separately.

Fix compilation with musl by defining _GNU_SOURCE. What's funny here is
that if __USE_GNU gets replaced, the host build fails. The man page says
_GNU_SOURCE for pthread_getattr_np but glibc violates that statement.

Removed classpath dependency. classpaths must select jamvm, not the other
way around.

Removed target whitelist. Switched to blacklist.

Fixed License information.

Various other cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 2972cc98eb)
2019-09-26 19:36:22 -07:00
Rosen Penev 68124fc18a classpath: Add jamvm/host build dependency
This is needed for compilation. A Java compiler is also needed but that
must be handled elsewhere.

Fixed up license information.

URLs to HTTPS.

Other Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 1862f908eb)
2019-09-26 19:36:22 -07:00
Rosen Penev 22abd241cf libshout: Update to 2.4.3
Removed inactive maintainer.

Rearranged Makefile for consistency between packages.

Added --without-pic to avoid both -fPIC and -fpic.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 9bacdfa9a2)
2019-09-26 19:36:22 -07:00
Rosen Penev 7a28475b8b libtasn1: Update to 4.14
Fixes CVE-2018-1000654

Minor cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 8482407d7c)
2019-09-26 19:36:21 -07:00
Russell Senior 4e2e2ed8f8 patch: rename CVE-2019-13638 patch to mollify uscan
Signed-off-by: Russell Senior <russell@personaltelco.net>
(cherry-picked from 604102a865)
2019-09-26 19:36:21 -07:00
Russell Senior 89b362e22b patch: apply upstream patch for CVE-2019-13638
GNU patch through 2.7.6 is vulnerable to OS shell command injection that
can be exploited by opening a crafted patch file that contains an ed style
diff payload with shell metacharacters. The ed editor does not need to be
present on the vulnerable system. This is different from CVE-2018-1000156.

https://nvd.nist.gov/vuln/detail/CVE-2019-13638

Signed-off-by: Russell Senior <russell@personaltelco.net>
(cherry-picked from b82198ff47)
2019-09-26 19:36:21 -07:00
Russell Senior d91bbb1971 tools/patch: apply upstream patch for CVE-2019-13636
In GNU patch through 2.7.6, the following of symlinks is mishandled in
certain cases other than input files. This affects inp.c and util.c.

https://nvd.nist.gov/vuln/detail/CVE-2019-13636

Signed-off-by: Russell Senior <russell@personaltelco.net>
(cherry-picked from c8142f1ac1)
2019-09-26 19:36:21 -07:00
Rosen Penev d084083e42 Merge pull request #10086 from adde88/openwrt-19.07
Openwrt 19.07
2019-09-26 13:32:03 -07:00
Andreas Nilsen 1e48632e08 hcxtools: Update to v5.2.2
Signed-off-by: Andreas Nilsen <adde88@gmail.com>
2019-09-26 19:47:29 +02:00
Andreas Nilsen 80002c1b99 hcxdumptool: Update to v5.2.2
Signed-off-by: Andreas Nilsen <adde88@gmail.com>
2019-09-26 19:47:08 +02:00
Josef Schlehofer de686dc0e8 python-sentry-sdk: Update to version 0.12.2
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-26 18:24:21 +02:00
Karl Palsson 1f1444ed2c net/mosquitto: bump to 1.6.7
Fixes compatibility with newer libwebsockets versions.
Fixes performance issues with websockets
Fixes potential crash on config reload
Fixes CVEs: CVE-2019-11778 and CVE-2019-11779
Various MQTTv5 fixes.
Skips releases with critical regressions

Changelog for 1.6.7:
https://mosquitto.org/blog/2019/09/version-1-6-7-released/

Changelog for 1.6.5:
https://mosquitto.org/blog/2019/09/version-1-6-5-released/

Changelog for 1.6.6:
https://mosquitto.org/blog/2019/09/version-1-6-6-released/

Signed-off-by: Karl Palsson <karlp@etactica.com>
2019-09-25 16:13:23 +00:00
Hannu Nyman 83e7e3af8d Merge pull request #10064 from stangri/19.07-simple-adblock
[19.07] simple-adblock: dnsmasq.ipset option support, better handling of IDNs, updated README
2019-09-25 19:13:00 +03:00
Hannu Nyman 55c6121536 Merge pull request #10072 from gladiac1337/haproxy-2.0.6-openwrt-19.07
[openwrt-19.07] haproxy: Update HAProxy to v2.0.6
2019-09-25 19:11:40 +03:00
Christian Lachner aacc401495 haproxy: Update HAProxy to v2.0.6
- Update haproxy download URL and hash
- Add new patches

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-09-25 11:53:08 +02:00
W. Michael Petullo b43de99d0e pigeonhole: update to 0.5.7.2
Fixes CVE-2019-11500.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry-picked from 707c683fba)
2019-09-24 15:08:52 -07:00
Josef Schlehofer 0f33ce200d dovecot: Update to version 2.3.7.2
Fix CVE-2019-11500

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from 5275c4156b)
2019-09-24 15:07:47 -07:00
Jan Pavlinec 6bab28e8d7 usbip: disable ASLR PIE
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit ff216608a0)
2019-09-24 21:58:31 +02:00
Stan Grishin 17a58fa39d simple-adblock: dnsmasq.ipset option support, better handling of IDNs, updated README
Signed-off-by: Stan Grishin <stangri@melmac.net>
2019-09-24 09:12:08 -07:00
Rosen Penev b15b698e38 libredblack: Pass CFLAGS
CFLAGS were not being passed. This was breaking builds with ASLR.

Pass proper PIC command to gcc with $(fPIC).

Don't install static libraries. Keep those for InstallDev only.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from fbcf61d9d3)
2019-09-23 12:00:10 -07:00
Rosen Penev d9d25ba673 libredblack: Update to 1.3
Technically the same version, but this uses the normal tarball instead of
a random GitHub repository.

Cleaned up Makefile as a result.

Removed Python dependency. rbgen is not used for the package.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 6e8cb556e4)
2019-09-23 11:59:51 -07:00
Rosen Penev 459918c530 keyutils: Pass OpenWrt CFLAGS directly.
Needed for compilation with PKG_ASLR_PIE.

Replaced Build/Compile with PKG_INSTALL.

Adjusted install paths for consistency.

Added license information.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from ccc3b6d44a)
2019-09-23 11:59:03 -07:00
Rosen Penev 3fdf5bf2ee libpbc: Pass CFLAGS properly
This was breaking ASLR builds.

Fixed license tag.

Added PKG_BUILD_PARALLEL for faster compilation.

Small Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 43f811ad5b)
2019-09-23 11:58:50 -07:00
Rosen Penev efe8842b51 crconf: Pass CFLAGS properly
CFLAGS were not being passed, breaking ASLR builds.

Switched to using PKG_SOURCE_DATE for the version.

Added PKG_BUILD_PARALLEL for faster compilation.

Added license information.

Small Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 35a258a55c)
2019-09-23 11:58:27 -07:00
Rosen Penev f10bea0e44 madplay: Pass CFLAGS properly
CFLAGS were not being passed which was breaking ASLR builds.

Fixed license header.

Added PKG_BUILD_PARALLEL for faster compilation.

Added PKG_INSTALL for consistency.

Passed proper $(FPIC) value.

Several other Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 76c0bea36b)
2019-09-23 11:58:16 -07:00
Rosen Penev fd31ee0a93 atftp: Update to 0.7.2
Fixes issue where CFLAGS were not being passed. This was breaking ASLR
builds.

Added PKG_BUILD_PARALLEL for faster compilation.

Added PKG_INSTALL. Changed install paths based on PKG_INSTALL paths.

Added --disable-debug to make sure debug code is disabled.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 946dfed856)
2019-09-23 11:57:51 -07:00
Rosen Penev 278fcd09a7 v4l2rtspserver: Update to 0.1.8
Updated live555 to 2019.08.28

Add TARGET_CFLAGS to LIVE555 CFLAGS to fix compilation with ASLR.

Several other Makefile cleanups and optimizations.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 523eeaed54)
2019-09-23 11:57:32 -07:00
Rosen Penev b0a8ff354e Merge pull request #10019 from dibdot/adblock-19.07
[19.07] adblock: update 3.8.6
2019-09-17 13:31:25 -07:00
Dirk Brenken 2c7118e1d7 adblock: update 3.8.6
* refine stop logic to prevent needless dns backend restarts
  and other oddities
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
2019-09-17 13:59:08 +02:00
Karel Kočí c004f8a7a6 python-intelhex: add new package
This is Python library to parse, generate and in general handle files
in Intel HEX format.

Signed-off-by: Karel Kočí <cynerd@email.cz>
(cherry-picked from commit 306e276a3b)
2019-09-17 08:44:59 +02:00
Karel Kočí 4aa305c99d bigclown-firmware-tool: update to version 1.4.1
This release updates: bcf create --from

There are no dependencies changes introduced by upstream and changes are
of limited character.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry-picked from commit 7741e5db4b)
2019-09-17 08:43:21 +02:00
Karel Kočí c23b682767 bigclown-firmware-tool: add new package
This is tool to flash/manage firmware in Bigclown modules.

Signed-off-by: Karel Kočí <cynerd@email.cz>
(cherry-picked from commit 7950442dff)
2019-09-17 08:43:09 +02:00
Karel Kočí b5a451cfe4 bigclown-mqtt2influxdb: update to version 1.2.0
This version introduces new option -d that makes service not to exit on
error. This is brutal solution but is required to protect against
service failure when remote resource is down.

bigclown-mqtt2influxdb is service moving data from MQTT to InfluxDB and
both of those services can and potentially are remote. The original
implementation where it failed when service goes down is not ideal
because network outage or target server outage can later require this
service restart.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry-picked from commti 508e2b865a)
2019-09-17 08:42:09 +02:00
Karel Kočí c35c9d6932 python-schema: update to version 0.7.1
Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry-picked from commit 7bb6d72a47)
2019-09-17 08:41:40 +02:00
Hannu Nyman b2f6a65e19 Merge pull request #9999 from flyn-org/openldap-19.07
openldap: update to 2.4.48
2019-09-15 19:43:34 +03:00
Rosen Penev 18975d4fa3 Merge pull request #9998 from flyn-org/libgcrypt-19.07
libgcrypt: Update to 1.8.5
2019-09-15 07:23:20 -07:00
Rosen Penev 3875601317 Merge pull request #10000 from cshoredaniel/pr-19.07-p910nd-non-root-backport
[19.07] p910nd: Run as non-root by default
2019-09-15 07:16:27 -07:00
Rosen Penev 335240c842 Merge pull request #10002 from cshoredaniel/pr-19.07-uwsgi-cgi-backport
[19.07] uwsgi-cgi: use python3 hostpkg not system python3
2019-09-15 07:16:19 -07:00
Rosen Penev cfc39afc95 Merge pull request #10001 from cshoredaniel/pr-19.07-msmtp-scripts-backport
[19.07] msmtp-scripts: Backport fix for run-time failure
2019-09-15 07:15:58 -07:00
Daniel F. Dickinson 0e78a105c8 uwsgi-cgi: use python3 hostpkg not system python3
On a Debian system without python3-distutils install, uwsgi-cgi was
failing to build because it couldn't import sysconfig from distutils.
OpenWrt packages should be using the OpenWrt python not the system
python. In addition we need to use python3 not python2, even when
both are available.

(cherry-pick c387d0923c from master)

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2019-09-14 16:46:05 -04:00
Daniel F. Dickinson 875eb10d11 p910nd: Run as non-root by default
We add the necessary Makefile, hotplug, config, and init bits
so that p910nd daemon runs as user:group p910nd:lp by default.
This eliminates an unnecessary root daemon.

The hotplug script sets the permissions of the USB lp
device(s) to read-write owner and group and no access to
anyone else, and sets owner root, group lp.

This is allows sufficient privileges to p910nd
to do it's job.

(cherry-pick 932c76fa74)

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2019-09-14 16:44:08 -04:00
Daniel F. Dickinson 0ff1a55891 msmtp-scripts: Backport to fix runtime failure
This commit syncs msmtp-scripts with master as current
openwrt-19.07 is broken.

Cherry-picks and squashes the following commits from
master.

6d8cff9a msmtp-scripts: Fix LICENSE information
d163eaea msmtp-scripts: Overhaul and update like upstream
3c15d410 msmtp-scripts: Make conn_test default nc
b9cc3cf2 msmtp-scripts: Fix spool/lock dir permissions
f76408af msmtp-scripts: Add msmtprc permission docs

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2019-09-14 16:40:17 -04:00
Daniel F. Dickinson 2c51c7b18e msmtp: msmtp-scripts: Backport "Enable PROVIDES and ALTERNATIVES"
Backports needed change from master for the next commit (a
combined cherry-pick and squash of required fixes to msmtp-scripts,
due to msmtp-scripts being broken on openwrt-19.07).

Use the PROVIDES mechanism so that msmtp and msmtp-nossl can be be
+depended-on and avoid generating a file level conflict.  Also use
alternatives for msmtp-mta and msmtpq-ng-mta with msmtp-mta since
we can only have one sendmail at a time.

(cherry-pick f76408af48)

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2019-09-14 16:39:52 -04:00
W. Michael Petullo ecc6de6e22 openldap: update to 2.4.48
Fixes CVE-2019-13565.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
2019-09-14 12:30:58 -04:00
Rosen Penev 68092405c2 libgcrypt: Update to 1.8.5
Fixed up license information. Only the library is packaged.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2019-09-14 12:29:27 -04:00