Commit Graph
11200 Commits
Author SHA1 Message Date
Josef SchlehoferandNoah Meyerhans 58b4399a5c bind: update to version 9.11.19
Fixes:
CVE-2020-8616
CVE-2020-8617

Remove backported patch

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-05-20 11:23:29 -07:00
Rosen PenevandGitHub 24d14e8b35 Merge pull request #12235 from jefferyto/python-openssl-ca-certs-openwrt-18.06
[openwrt-18.06] python-openssl,python3-openssl: Add dependency on ca-bundle
2020-05-20 09:21:37 -07:00
Jeffery To 76a67189c5 python-openssl,python3-openssl: Add dependency on ca-bundle
The ssl module assumes OpenSSL can load the default trust anchors (root
CA certificates).

From https://github.com/openwrt/packages/issues/12209

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-20 17:28:02 +08:00
Jan KardellandJeffery To e2aa53d376 Python: Fix compile of host modules
Add -rpath linker option to host build, pointing to staging/hostpkh/lib.
It's needed to find the correct host libs during runtime, without it the
hosts libs may be used instaead, causing failures.

Signed-off-by: Jan Kardell <jan.kardell@telliq.com>
(cherry picked from commit 0311e58bb6)
2020-05-20 17:28:02 +08:00
Jan KardellandJeffery To 618771c3a3 Python3: Fix host build on OpenSUSE
The linker option -rpath is required to find libs in staging_dir. Now it
is included when building host modules. Without it the import test of
the _ctypes and _uuid modules would fail. The _ctypes module uses
libffi.so.6 from staging, but OpenSUSE LEAP 15 has libffi.so.7.
It will also fail on LEAP 42.x, Fedora28 and 29 and future or old
versions of Ubuntu.

Fix needed in master and 18.06 branches.

Signed-off-by: Jan Kardell <jan.kardell@telliq.com>
(cherry picked from commit 6ade5a1e3a)
2020-05-20 17:28:02 +08:00
Josef Schlehofer 8b23a429bb unbound: update to version 1.10.1
Fixes:
CVE-2020-12662
CVE-2020-12663

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-05-19 11:50:58 +02:00
Hannu NymanandGitHub 8a02981921 Merge pull request #12207 from micmac1/mar-1806-10413
[18.06] mariadb: minor version bump with CVE fixes
2020-05-18 08:49:19 +03:00
Sebastian Kemper 0bf8d57193 mariadb: bump to 10.1.45
Fixes:

  CVE-2020-2752
  CVE-2020-2812
  CVE-2020-2814

This commit also moves mysql_upgrade to the client package and installs
the configuration files readable for all, so that the clients can read
them.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-18 00:24:31 +02:00
Michael Heimpold bb636880d8 php7: update to version 7.2.31
This fixes:
  - CVE-2019-11048

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 2e6bd4cb86)
2020-05-16 14:17:24 +02:00
Hannu NymanandGitHub 0da88f8eb3 Merge pull request #12142 from EricLuehrsen/unbound_1806_1100
[openwrt-18.06] unbound: update to 1.10.0
2020-05-11 15:09:22 +03:00
Eric Luehrsen eab86cd2ce unbound: update to 1.10.0
cherry-pick: f779ef48cd
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2020-05-10 23:55:28 -04:00
Hannu NymanandGitHub f245b0e887 Merge pull request #12058 from stangri/18.06-vpnbypass
[18.06] vpnbypass: bugfix: remove non-ASCII from system log; update README
2020-05-03 22:53:02 +03:00
Stan Grishin 1c2ac45a22 vpnbypass: bugfix: remove non-ASCII from system log; update README
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-05-02 22:35:55 +00:00
Josef Schlehofer a821c3789d youtube-dl: update to version 2020.3.24
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-05-01 11:47:42 +02:00
Josef SchlehoferandGitHub c0ec2dfd55 Merge pull request #11995 from jefferyto/python-2.7.18-openwrt-18.06
[openwrt-18.06] python: Update to 2.7.18, refresh patches
2020-04-29 10:57:13 +02:00
Jeffery To dd5896c7c4 python: Update to 2.7.18, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-04-29 06:08:03 +08:00
yurtesenandFlorian Eckert baacda1b4a mwan3: Fix json_load fails with some data
Sometimes the return value of `ubus -S call network.interface.wan status`
cause `json_load` to return `Failed to parse message data` error.

To avoid this, the JSON data always should be quoted with double quotes.

Signed-off-by: Evren Yurtesen <eyurtese@abo.fi>
Removed quoatation marks from commit heading
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 94e0c78826)
2020-04-28 10:21:14 +02:00
Rosen PenevandJosef Schlehofer 6f81894d9e libarchive: update to 3.4.2
Switch to normal tarballs. Remove autoreconf as a result.

Several Makefile cleanups for consistency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c22dd1bf74)
(cherry picked from commit 2085b990ff)
2020-04-28 09:55:51 +02:00
Jan PavlinecandJosef Schlehofer 5fc2af4385 libarchive: update to version 3.4.1 (security fix)
Fixes CVE-2019-19221

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from df634dcc92)
(cherry picked from commit ba43556aed)
2020-04-28 09:55:44 +02:00
Josef SchlehoferandMichael Heimpold f85dd8b965 php7: update to version 7.2.30
Fixes:
CVE-2020-7066
CVE-2020-7064

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 09738290a3)
2020-04-25 23:31:13 +02:00
Michael Heimpold ae0e27548f php7: fix dependencies for mysqlnd (fixes #11113)
When during the build the openssl extension is also selected, then
the mysqlnd extension depends on it, too.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 50b1cd3757)
2020-04-25 23:30:29 +02:00
Hannu NymanandGitHub 4df97ac0ee Merge pull request #11926 from stangri/18.06-simple-adblock
[18.06] simple-adblock: bugfix: start downloads on cold boot/fresh install
2020-04-22 20:57:48 +03:00
Stan Grishin 7ed5c9364b simple-adblock: bugfix: start downloads on cold boot
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-04-22 17:46:23 +00:00
tripolarandGitHub 96a2a5cfbc Merge pull request #11907 from BKPepe/18.06-git
[18.06] git: update to version 2.20.4
2020-04-21 10:04:02 +02:00
Josef Schlehofer fc93a4f126 git: update to version 2.20.4
Fixes CVE-2020-11008

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-04-21 08:11:54 +02:00
Josef SchlehoferandGitHub 3b55acda90 Merge pull request #11857 from BKPepe/18.06-git
[18.06] git: update to version 2.20.3
2020-04-21 07:22:14 +02:00
tripolarandGitHub 48b347e47c Merge pull request #11883 from yousong/wget1806
[18.06] acme: depends on wget-ssl
2020-04-18 19:55:52 +02:00
Yousong Zhou a62e54af3e acme: depends on wget-ssl
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit d917d662ae)
2020-04-18 23:46:09 +08:00
Yousong Zhou 7d1f138c23 wget: make the ssl variant provides wget-ssl
This is to address the need for specifying dependency on a wget
implementation with ssl support.

Now we have a game of names for opkg

 1. uclient-fetch: minimal version by openwrt project
 2. wget-nossl: gnu wget w/o ssl support
 3. wget-ssl: for the moment since this commit, gnu wget w/ ssl support
 4. wget: uclient-fetch, wget-nossl, or wget-ssl
 5. gnu-wget: wget-nossl or wget-ssl

By the time we provide some dummy package like uclient-fetch-ssl and
make it also provide wget-ssl, I guess by then we will also need
gnu-wget-ssl...

Ref: https://github.com/openwrt/packages/issues/11534
Ref: https://github.com/openwrt/packages/pull/9941
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 585e4a38fe &
resolved conflict)
2020-04-18 23:45:35 +08:00
Karel KočíandYousong Zhou b075784431 wget: do not provide itself
The package wget should not say that it provides itself.

This also make gnu-wget provide general so it is not written in Makefile
twice.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 75f2be7d50 &
resolved conflict)
2020-04-18 23:44:20 +08:00
Luiz Angelo Daros de Luca 3066aaa825 ruby: update to 2.5.8
This release includes security fixes, specially:

* CVE-2020-10663: Unsafe Object Creation Vulnerability in JSON (Additional fix)
* CVE-2020-10933: Heap exposure vulnerability in the socket library

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2020-04-15 17:20:17 -03:00
Josef Schlehofer 4a4c793272 git: update to version 2.20.3
Fixes CVE-2020-5260

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-04-15 17:18:25 +02:00
Jo-Philipp Wich a0fe9eeab1 nlbwmon: update to latest Git HEAD
34a1887 nfnetlink: disable sequence number checking

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 53c48fae15)
2020-04-11 23:24:42 +02:00
Hannu NymanandGitHub c0fffb996f Merge pull request #11821 from stangri/18.06-https-dns-proxy
[18.06] https-dns-proxy: bugfix: memory leak
2020-04-11 10:48:29 +03:00
Stan Grishin a0a779faf6 https-dns-proxy: bugfix: memory leak
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-04-11 00:25:39 +00:00
Jo-Philipp Wich e8cf2e60ae nlbwmon: update to latest Git HEAD
e757e06 nfnetlink: allow specifying the socket buffer size
33c77cb nfnetlink: properly handle nl_recvmsgs() failures
95cced5 protocol: Include whitespace when reading names

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit d81d777a0f)
2020-04-11 00:33:10 +02:00
DENG QingfangandJo-Philipp Wich 8696b34992 nlbwmon: bump to latest git
e921ca0a Add further commonly used protocols to the protocol file.

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
(cherry picked from commit 5e140462e4)
2020-04-11 00:33:10 +02:00
Richard YuandJo-Philipp Wich c66a3cf7ce nlbwmon: add procd reload trigger for nlbwmon config
Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit d551758310)
2020-04-11 00:33:09 +02:00
Kevin Darbyshire-BryantandJo-Philipp Wich 28d6dc944e nlbwmon: receive dhcp interface triggers
Not all interfaces may have been allocated address at nlbwmon startup so
it may not collect statistics as expected/configured.

Add interface triggers to catch dhcp events and restart as required.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(cherry picked from commit 662d3f16d2)
2020-04-11 00:33:09 +02:00
Marc BenoitandJo-Philipp Wich 6a642a6073 net/nlbwmon: run with lower priority
Even on a powerful platform a nlbwmon process'
activities are sometimes affecting throoughput and
latency. This is a backgroud process, that should not
be running with default priority.
Even if it is a little deplayed, that is not a worry in
this case. The routing should be the main priority,
bandwidth stats collection can wait a bit.

Tested on Netgear R7800
Signed-off-by: Marc Benoit <marcb62185@gmail.com>
(cherry picked from commit 9b3ecbd64a)
2020-04-11 00:33:09 +02:00
Rosen PenevandGitHub 21f7d16a19 Merge pull request #11803 from stangri/18.06-simple-adblock
[18.06] simple-adblock: bugfixes: remove escape chars from log, restore from cache on boot
2020-04-07 18:39:35 -07:00
Stan Grishin 6787a9bfd2 simple-adblock: bugfixes: remove escape chars from log, restore from cache on boot
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-04-07 21:55:51 +00:00
Hannu Nyman 876a7418fe nano: update to 4.9.2
Update nano editor to version 4.9.2

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit f11833d46c)
2020-04-07 18:07:20 +03:00
Josef SchlehoferandGitHub 133f71a2cd Merge pull request #11773 from BKPepe/msmtp
[18.06] msmtp: update to version 1.8.7
2020-04-06 09:45:41 +02:00
Josef Schlehofer b0484b0051 msmtp: update to version 1.8.7
- It brings oauthbearer support
- It switches from OpenSSL to GnuTLS, which is fully compatible and
  brings more parameters

Makefile changes:
- Fix SPDX License Identifier
- Add PKG_CPE_ID
- The Project does not use sourceforce anymore.
- Uses GnuTLS instead of OpenSSL, which was discouraged

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-04-06 00:57:02 +02:00
Hannu Nyman 2c4a58a38b nano: update to 4.9.1
Update nano editor to version 4.9.1

 2020.03.31 - GNU nano 4.9.1 "Sapperdeflap"
 Two bugs introduced in version 4.9 are fixed: the cursor
 getting misplaced when undoing line cuts, and filtering
 of the whole buffer to a new buffer not working.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit f5c47a2606)
2020-04-05 19:24:07 +03:00
Hannu NymanandGitHub 6effd4b7aa Merge pull request #11756 from gladiac1337/haproxy-1.8.25-openwrt-18.06
[openwrt-18.06] haproxy: Update HAProxy to v1.8.25
2020-04-03 16:47:09 +03:00
Christian Lachner 0db9f894de haproxy: Update HAProxy to v1.8.25
- Update haproxy download URL and hash
- This fixes CVE-2020-11100 (http://git.haproxy.org/?p=haproxy-1.8.git;a=commit;h=525fbbe388ba033d638ff2a4efb83ae6526db5ab)

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2020-04-03 09:24:53 +02:00
Hannu NymanandGitHub 5610642876 Merge pull request #11700 from stangri/18.06-simple-adblock
[18.06] simple-adblock: support multiple dnsmasq instances + internal refactoring
2020-03-29 10:01:04 +03:00
Stan Grishin 2c1a3aaf5a simple-adblock: support multiple dnsmasq instances; rework communication between principal package and luci app
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-03-29 05:13:29 +00:00