Rosen Penev and GitHub
82f8333123
Merge pull request #13435 from stangri/18.06-simple-adblock
...
[18.06] simple-adblock: add config auto-update feature
2020-09-20 04:14:31 -07:00
Stan Grishin
b7c198b3e9
simple-adblock: add config auto-update feature
...
Signed-off-by: Stan Grishin <stangri@melmac.net >
2020-09-20 00:17:04 +00:00
Michael Heimpold
a359b1b3bd
php7: update to 7.2.33
...
This fixes:
- CVE-2020-7068
Signed-off-by: Michael Heimpold <mhei@heimpold.de >
(cherry picked from commit 473ca554f5 )
2020-09-10 20:57:21 +02:00
Hannu Nyman
0ad7b4af0a
nano: update to 5.2
...
Update nano editor to version 5.2.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi >
(cherry picked from commit 3ce7595136 )
2020-08-25 23:06:56 +03:00
Rosen Penev and GitHub
b2978d83db
Merge pull request #13188 from stangri/18.06-simple-adblock
...
[18.06] simple-adblock: bugfix: update config; use command -v
2020-08-21 17:48:40 -07:00
Stan Grishin
b3170384c1
simple-adblock: bugfix: update config; use command -v
...
Signed-off-by: Stan Grishin <stangri@melmac.net >
2020-08-21 23:29:33 +00:00
Robby K and Josef Schlehofer
4c1293e3f8
freeradius3: Fix proxy.conf file conflict.
...
It was provided by both the freeradius3 and freeradius3-mod-realm packages.
Now provided by the freeradius3 package only.
Signed-off-by: Robby K <robbyke@gmail.com >
Fixes : #13149
(cherry picked from commit c81d176e80 )
2020-08-17 13:04:36 +02:00
Rosen Penev and GitHub
f8423ccb09
Merge pull request #13123 from jjm2473/lvm2-fix-mac-sh-for-1806
...
lvm2: fix CE in mac (backport)
2020-08-15 01:45:13 -07:00
Liangbin Lian
3fd112e4a3
lvm2: fix CE in mac
...
command-count.h generated by makefile was wrong
when using default shell in mac,
set shell to bash to fix it.
Signed-off-by: Liangbin Lian <jjm2473@gmail.com >
(cherry picked from commit 9bb0962d6e )
2020-08-14 19:53:59 +08:00
Hannu Nyman
2d1f837934
nano: update to 5.1
...
Update nano to version 5.1.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi >
(cherry picked from commit 02f9ec4adc )
2020-08-12 22:59:17 +03:00
Hannu Nyman
e6e24738e3
nano: update to 5.0
...
Update nano editor to version 5.0.
http://git.savannah.gnu.org/cgit/nano.git/tree/NEWS
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi >
(cherry picked from commit 409633f0dd )
2020-08-12 22:59:14 +03:00
Rosen Penev and GitHub
b2ed091298
Merge pull request #13057 from odmdas/odmdas-freeradius3-Makefile-18.06
...
[18.06] freeradius3: add missing conffiles to Makefile
2020-08-08 19:47:48 -07:00
Alexey Dobrovolsky
9c86718289
freeradius3: add missing conffiles to Makefile
...
Config files
/etc/freeradius3/policy.d/accounting
/etc/freeradius3/policy.d/filter
/etc/freeradius3/proxy.conf
/etc/freeradius3/sites-available/default
and link
/etc/freeradius3/sites-enabled/default
are in the freeradius3 package and are mentioned in the main config file
/etc/freeradius3/radiusd.conf
Thus, they must be explicitly specified in the Makefile.
File
/etc/freeradius3/sites/default
is not included in the package, is not created during installation,
is not mentioned in the main config file and should therefore be excluded
from the Makefile.
(backported from commit f6974b8 )
Signed-off-by: Alexey Dobrovolsky <dobrovolskiy.alexey@gmail.com >
2020-08-09 00:44:42 +03:00
Rosen Penev and GitHub
717b781ad7
Merge pull request #13023 from stangri/18.06-simple-adblock
...
[18.06] simple-adblock: README and config update
2020-08-05 13:16:56 -07:00
Stan Grishin
8dc8d4c207
simple-adblock: README and config update
...
Signed-off-by: Stan Grishin <stangri@melmac.net >
2020-08-04 22:51:00 +00:00
Rosen Penev and GitHub
f9daa828e0
Merge pull request #12999 from jjm2473/libtasn1-support-host-compile
...
libtasn1: add host build
2020-08-03 20:03:12 -07:00
Andy Walsh and Liangbin Lian
2d3a84f0fe
libtasn1: add host-build
...
* samba4 complains that it cant find the libasn1 host bins
Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com >
(cherry picked from commit 42e9057d41 )
2020-08-04 10:38:08 +08:00
Rosen Penev and GitHub
705d25d5a1
Merge pull request #12989 from jjm2473/netatalk-fix-CE-dtrace
...
netatalk: fix compile error in mac os
2020-08-03 13:38:18 -07:00
Liangbin Lian
6aeaf7dc92
netatalk: fix compile error in mac os
...
fix compile error in mac os when dtrace installed.
Signed-off-by: Liangbin Lian <jjm2473@gmail.com >
2020-08-03 15:53:59 +08:00
Rosen Penev and GitHub
a93b93d02b
Merge pull request #12991 from jjm2473/libgpg-error-fix-gawk50-3
...
libgpg-error: Fix compilation with GAWK 5.0
2020-08-01 16:00:32 -07:00
Liangbin Lian
77587bedae
libgpg-error: Fix compilation with GAWK 5.0
...
Patch from Upstream.
Signed-off-by: Liangbin Lian <jjm2473@gmail.com >
2020-08-02 00:11:09 +08:00
Rosen Penev and GitHub
aa777df6da
Merge pull request #12882 from jefferyto/python3-backport-patches-openwrt-18.06
...
[openwrt-18.06] python3: Backport security fixes
2020-07-20 03:24:50 -07:00
Jeffery To
e05705fa54
python3: Backport security fixes
...
This backports fixes for security issues, including:
* CVE-2020-14422: Hash collisions in IPv4Interface and IPv6Interface
* CVE-2019-20907: Infinite loop in the tarfile module
Signed-off-by: Jeffery To <jeffery.to@gmail.com >
2020-07-20 17:43:45 +08:00
Hannu Nyman
c15122fb7a
haveged: update to 1.9.13
...
Update haveged to version 1.9.13.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi >
(cherry picked from commit 28cf201290 )
2020-07-18 14:15:45 +03:00
Rosen Penev and GitHub
546975dffb
Merge pull request #12661 from jefferyto/python-3.6.11-openwrt-18.06
...
[openwrt-18.06] python3: Update to 3.6.11
2020-06-30 14:33:05 -07:00
Jeffery To
6417457339
python3: Update to 3.6.11
...
This contains a fix for CVE-2020-8492 (Denial of service in
urllib.request.AbstractBasicAuthHandler)[1].
[1]: https://docs.python.org/release/3.6.11/whatsnew/changelog.html#python-3-6-11-release-candidate-1
Signed-off-by: Jeffery To <jeffery.to@gmail.com >
2020-07-01 00:01:28 +08:00
Rosen Penev and GitHub
3361313d33
Merge pull request #12615 from stangri/18.06-https-dns-proxy
...
[18.06] https-dns-proxy: re-add conffiles and add description to Makefile
2020-06-25 22:18:08 -07:00
Stan Grishin
7d36084381
https-dns-proxy: re-add conffiles and add description to Makefile
...
Signed-off-by: Stan Grishin <stangri@melmac.net >
2020-06-26 03:09:53 +00:00
Rosen Penev and GitHub
f2b54d8261
Merge pull request #12598 from stangri/18.06-https-dns-proxy
...
[18.06] https-dns-proxy: bugfix: remove eDNS support
2020-06-25 14:22:22 -07:00
Stan Grishin
e97462d3d5
https-dns-proxy: bugfix: remove eDNS support
...
Signed-off-by: Stan Grishin <stangri@melmac.net >
2020-06-25 19:41:07 +00:00
Hannu Nyman
a66ee15de5
haveged: update to 1.9.12
...
Update haveged to version 1.9.12
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi >
(cherry picked from commit 6392d50c31 )
2020-06-21 23:25:18 +03:00
Hannu Nyman
ca1c97a9b5
haveged: update to 1.9.11
...
Update haveged to version 1.9.11
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi >
(cherry picked from commit ca30b0ff91 )
2020-06-14 21:17:24 +03:00
Karel Kočí and Hannu Nyman
ca1082fa14
haveged: move init script from 13 to 01
...
This is intended as a match with standard urngd. They serve same purpose
and urngd starts as first with 00. Starting haveged later can create
issues if you replace urngd with it. The example problem is if
uci-defaults script decides to generate certificate. Haveged can supply
entropy but it is started later and to mitigate this urngd would still
have to be installed. This means that haveget can't serve as replacement
without moving it to match start order of urngd.
Signed-off-by: Karel Kočí <karel.koci@nic.cz >
(cherry picked from commit 1ef38f45d9 )
2020-06-14 21:17:21 +03:00
Etienne Champetier and GitHub
4176f48148
Merge pull request #12508 from stangri/18.06-simple-adblock
...
[18.06] simple-adblock: racially-neutral names
2020-06-13 18:11:18 -04:00
Stan Grishin
2ea2b371b3
simple-adblock: racially-neutral names
...
Signed-off-by: Stan Grishin <stangri@melmac.net >
2020-06-13 20:39:21 +00:00
Rosen Penev and GitHub
45709a6230
Merge pull request #12455 from stangri/18.06-simple-adblock
...
[18.06] simple-adblock: remove obsolete dshield.org links from config
2020-06-08 13:50:52 -07:00
Stan Grishin
596c55ab24
simple-adblock: remove obsolete dshield.org links from config
...
Signed-off-by: Stan Grishin <stangri@melmac.net >
2020-06-08 17:36:02 +00:00
Hannu Nyman and GitHub
96718d025b
Merge pull request #12335 from stangri/18.06-simple-adblock
...
[18.06] simple-adblock: bugfix: proper error reporting on failed downloads; lists update script
2020-06-03 18:21:58 +03:00
Stan Grishin
971346c385
simple-adblock: bugfix: proper error reporting on failed downloads; lists update script
...
Signed-off-by: Stan Grishin <stangri@melmac.net >
2020-05-27 00:26:28 +00:00
Hannu Nyman
c3c558f6e3
nano: update to 4.9.3
...
Update nano version to 4.9.3
Minor bugfix release.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi >
(cherry picked from commit 38be46a7ae )
2020-05-24 20:44:07 +03:00
Josef Schlehofer and Noah Meyerhans
58b4399a5c
bind: update to version 9.11.19
...
Fixes:
CVE-2020-8616
CVE-2020-8617
Remove backported patch
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2020-05-20 11:23:29 -07:00
Rosen Penev and GitHub
24d14e8b35
Merge pull request #12235 from jefferyto/python-openssl-ca-certs-openwrt-18.06
...
[openwrt-18.06] python-openssl,python3-openssl: Add dependency on ca-bundle
2020-05-20 09:21:37 -07:00
Jeffery To
76a67189c5
python-openssl,python3-openssl: Add dependency on ca-bundle
...
The ssl module assumes OpenSSL can load the default trust anchors (root
CA certificates).
From https://github.com/openwrt/packages/issues/12209
Signed-off-by: Jeffery To <jeffery.to@gmail.com >
2020-05-20 17:28:02 +08:00
Jan Kardell and Jeffery To
e2aa53d376
Python: Fix compile of host modules
...
Add -rpath linker option to host build, pointing to staging/hostpkh/lib.
It's needed to find the correct host libs during runtime, without it the
hosts libs may be used instaead, causing failures.
Signed-off-by: Jan Kardell <jan.kardell@telliq.com >
(cherry picked from commit 0311e58bb6 )
2020-05-20 17:28:02 +08:00
Jan Kardell and Jeffery To
618771c3a3
Python3: Fix host build on OpenSUSE
...
The linker option -rpath is required to find libs in staging_dir. Now it
is included when building host modules. Without it the import test of
the _ctypes and _uuid modules would fail. The _ctypes module uses
libffi.so.6 from staging, but OpenSUSE LEAP 15 has libffi.so.7.
It will also fail on LEAP 42.x, Fedora28 and 29 and future or old
versions of Ubuntu.
Fix needed in master and 18.06 branches.
Signed-off-by: Jan Kardell <jan.kardell@telliq.com >
(cherry picked from commit 6ade5a1e3a )
2020-05-20 17:28:02 +08:00
Josef Schlehofer
8b23a429bb
unbound: update to version 1.10.1
...
Fixes:
CVE-2020-12662
CVE-2020-12663
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2020-05-19 11:50:58 +02:00
Hannu Nyman and GitHub
8a02981921
Merge pull request #12207 from micmac1/mar-1806-10413
...
[18.06] mariadb: minor version bump with CVE fixes
2020-05-18 08:49:19 +03:00
Sebastian Kemper
0bf8d57193
mariadb: bump to 10.1.45
...
Fixes:
CVE-2020-2752
CVE-2020-2812
CVE-2020-2814
This commit also moves mysql_upgrade to the client package and installs
the configuration files readable for all, so that the clients can read
them.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net >
2020-05-18 00:24:31 +02:00
Michael Heimpold
bb636880d8
php7: update to version 7.2.31
...
This fixes:
- CVE-2019-11048
Signed-off-by: Michael Heimpold <mhei@heimpold.de >
(cherry picked from commit 2e6bd4cb86 )
2020-05-16 14:17:24 +02:00
Hannu Nyman and GitHub
0da88f8eb3
Merge pull request #12142 from EricLuehrsen/unbound_1806_1100
...
[openwrt-18.06] unbound: update to 1.10.0
2020-05-11 15:09:22 +03:00