Commit Graph

7055 Commits

Author SHA1 Message Date
Dirk Brenken aa4df29f72 adblock: 2.3.0 (package release 3)
* refine too optimistic wget/uclient-fetch timeout defaults
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 5e4cd25103)
2017-02-12 10:47:39 +02:00
Stijn Tintel 5d5498f364 vallumd: bump to 0.1.3
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-02-10 09:32:58 +01:00
Hannu Nyman f9674c73c1 Merge pull request #3971 from chris5560/lede-17.01
[lede-17.01] ddns-scripts: New update url for service duiadns.net
2017-02-09 22:49:53 +02:00
Christian Schoenebeck bb6a10c69f [lede-17.01] ddns-scripts: New update url for service duiadns.net
- new update url for service duiadns.net
- updated public_suffix_list.dat

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
2017-02-09 21:25:18 +01:00
Daniel Engberg 225ced086e libs/gnutls: Don't link libidn unintentionally
Fixes compilation reported by by buildbots.

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
(cherry picked from commit c7c951eada)
2017-02-08 10:46:57 +02:00
Dirk Brenken 2c9e7ddc5f adblock: 2.3.0 (package release 2)
* update readme regarding unbound integration
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1e7a1b380b)
2017-02-07 21:06:31 +02:00
Ian Leonard 92541f9171 opus: update to 1.1.4
Includes fix for CVE 2017-0381.

Assume maintainership.

Signed-off-by: Ian Leonard <antonlacon@gmail.com>
2017-02-07 17:45:41 +01:00
Jo-Philipp Wich 06198d9c8c Revert "vnstat: update to v1.16"
This reverts commit 79b6e9dc61.

Undo the recent vnstat update due to upstream bugs preventing database
restoration.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2017-02-06 11:02:16 +01:00
Luiz Angelo Daros de Luca 49a5445a61 ruby: derive ABI version from VERSION
There might be no ABI breakage when the first two number
of version are the same.

(No change on generated packages. No need to bumb release)

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2017-02-05 20:11:03 +01:00
heil 7d74e5e9d8 package: pcre bump to version 8.40
Signed-off-by: heil <heil@terminal-consulting.de>
2017-02-05 20:10:03 +01:00
Eric Luehrsen 82b297d7c3 unbound: expand UCI to cover some popular dnsmasq features
Unbound+DHCP (server of your choice) should be able to replicate
a lot of what dnsmasq provides. With this change set Unbound
still works with dnsmasq, but also it can work with a plain
DHCP server. Features have been added within the UCI itself
to act like dnsmasq.

- alone: name each interface relative to router hostname
- alone: prevent upstream leakage of your domain and '.local'
- dnsmasq: use dnsmasq UCI to configure forwarding clauses
- dhcp: work with odhcpd as example of companion DHCP-DNS
- dhcp: convert DHCPv4 leases into EUI64 SLAAC for DNS records
- all: enable encrypted remote unbound-control using splice conf
- all: allow user spliced conf-files for hybrid UCI and manual conf
-- 'unbound_srv.conf' will be spliced into the 'server:' clause
-- 'unbound_ext.conf' will add clauses to the end, example 'forward:'

README HOW TO for dnsmasq-in-serial, dnsmasq-in-parallel, and
unbound-with-odhcpd have better/added UCI starters. HOW TO for
including unbound_srv.conf and unbound_ext.conf are added.
Document new UCI: add_local_fqdn, add_wan_fqdn, dhcp4_slaac6,
dhcp_link, domain, and domain_type

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>
2017-02-05 20:08:30 +01:00
Eric Luehrsen 1a458a5697 unbound: expand UCI support for odhcpd DHCP-DNS
This is bare minimum change in 'unbound.sh' and
'dnsmasq.sh' to migrate the UCI option set for
more flexibility. The boolean(s) to link to
dnsmasq are being changed to a state to include
odhcpd. It is executable but a small step for
clear change management.

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>
2017-02-05 20:08:30 +01:00
Eric Luehrsen 51e605f1de unbound: add odhcpd specific scripts to link DHCP-DNS
The UCI for Unbound already links to dnsmasq, but what
if with Unbound, we want to configure a plain dhcp server.
Most servers can call a script for lease events. That
script can then formulate DNS records and load them
with unbound-control (dependency).

The files added here work with OpenWRT/LEDE odhcpd, such
that it can be run alone. They can be used as examples
for any dhcp server. 'odhcpd.sh' is to be called by
odhcpd when a lease event occurs. 'odhcpd.awk' is called
internal to the shell script. The awk script handles
any tricky reformating that may be required.

/etc/config/dhcp
config odhcpd 'odhcpd'
  option leasetrigger '/usr/lib/unbound/odhcpd.sh'

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>
2017-02-05 20:08:30 +01:00
Eric Luehrsen 2f923ec281 unbound: improve NTP hotplug behavior when Unbound is disabled
If Unbound was disabled and at later time enabled, then it
would operate in DNSSEC less-secure mode. When NTP hotplug
was called, the timestamp file was not updated. This was
found testing Unbound vs other tools (bind, dnsmasq).

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>
2017-02-05 20:08:30 +01:00
Dirk Brenken 06a9de2d02 adblock: release 2.3.0
* automatically selects dnsmasq or unbound as dns backend
* add the new 'adguard' source, a combined/quite effective block list
* remove needless dns backend restarts
* optimize adblock restart behavior
* optimize block list processing on inotify enabled filesystems
* better return code checking on block list download
* fix boot function/startup on Chaos Calmer
* fix a bug in blocklist removal function
* add more (optional) debug output
* move backup options to global config
* documentation update

Signed-off-by: Dirk Brenken <dev@brenken.org>
2017-02-05 20:07:18 +01:00
Michael Heimpold f225a42320 php7: update to 7.1.1
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2017-02-05 19:59:20 +01:00
Matthias Schiffer c51423342d php7: fix xml2-config path to unbreak build
Partially reverts 4a984a8d6. Fixes #3907.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
2017-02-05 19:59:20 +01:00
Hauke Mehrtens 25be7a2220 tor: update to version 0.2.9.9
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-02-05 19:54:43 +01:00
Kevin Darbyshire-Bryant 2232cedc17 libidn: install libidn.pc in staging area & refresh patches
libidn.pc file was missing in package staging area causing build
failures for other packages expecting to find libidn package config
files.

refreshed patches to clear existing patch fuzz

take over maintainership

Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
2017-02-05 19:52:32 +01:00
p-wassi 0135af5e52 utils/gpsd: remove hotplug script
Remove a hotplug script, which starts/stops gpsd with
attaching/detaching a PL2302 USB-UART device.

Signed-off-by: Paul Wassi <p.wassi@gmx.at>
2017-02-05 19:42:53 +01:00
p-wassi 6dadfada60 utils/gpsd: (cosmetic) update config
Make the default config look like usual,
i.e.: indentation using tabs, single quotes, booleans 0/1

Signed-off-by: Paul Wassi <p.wassi@gmx.at>
2017-02-05 19:42:53 +01:00
p-wassi e9c58d08f0 utils/gpsd: Update to 3.16
Update gpsd to upstream release 3.16
The local patch is already included upstream, therefore
removed here.

Signed-off-by: Paul Wassi <p.wassi@gmx.at>
2017-02-05 19:42:53 +01:00
Daniel Engberg 7ba28a5783 net/stunnel: Update to version 5.40
Update stunnel to 5.40

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2017-02-05 19:41:50 +01:00
Hannu Nyman fd6f15ec3f rsync and cifs-utils: update download address
samba.org has apparently started to enforce https-only downloads,
so update the download links for rsync and cifs-utils.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2017-02-05 19:41:50 +01:00
Damiano Renfer f390d77d4d net/dnscrypt-proxy: update to 1.9.4
Signed-off-by: Damiano Renfer damiano.renfer@gmail.com
2017-02-05 19:41:50 +01:00
Stijn Tintel 59313e6480 strongswan: enable IKEv2 Mediation Extension
Closes #3905.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-02-05 19:41:50 +01:00
Jo-Philipp Wich 8470cae730 coreutils: add libcap dependency to selected applets
If libcap happens to be present in the environment, coreutils will pick it up
and link some applets against it.

Since the idea of coreutils is to provide a full featured alternative to the
busybox applets, do not inhibit the optional dependency but explicitely
require libcap instead.

Fixes the following error spotted on the buildbots:

    Package coreutils-dir is missing dependencies for the following libraries:
    libcap.so.2

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2017-02-05 19:40:06 +01:00
Jo-Philipp Wich 0a6abf0863 nail: fix build against OpenSSL with disabled SSLv3
Extend the existing patch handling disabled SSLv2 to cover the SSLv3 case as
well in order to fix the following build error reported by the buildbot:

    openssl.o: In function `ssl_open':
    openssl.c:(.text+0xa1c): undefined reference to `SSLv3_client_method'
    collect2: error: ld returned 1 exit status

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2017-02-05 19:40:06 +01:00
Jo-Philipp Wich b4ef335746 pen: update to v0.34.0
Update the pen package to upstream release v0.34.0 in order to fix the
following build error reported by the buildbot:

    ssl.o: In function `ssl_create_context':
    ssl.c:(.text+0x9c): undefined reference to `SSLv3_method'
    collect2: error: ld returned 1 exit status

Also switch from PKG_MD5SUM to PKG_HASH with SHA256 while we're at it.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2017-02-05 19:40:06 +01:00
Jo-Philipp Wich c03ff7ab8d perl-www-curl: fix build against curl >= 7.50
Import a proposed upstream bug fix to allow building against recent curl
versions. Fixes the following error observed by the buildbots:

    curlopt-constants.c:129:49: error: 'CURL_STRICTER' undeclared (first use in this function)
                 if (strEQ(name, "STRICTER")) return CURL_STRICTER;

Upstream bug: https://rt.cpan.org/Public/Bug/Display.html?id=117793

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2017-02-05 19:38:49 +01:00
Jo-Philipp Wich 9d441d2c34 socat: work around missing stddef.h include
The buildbots fail to build socat due to the following error:

    nestlex.c:14:7: error: unknown type name 'ptrdiff_t'

It appears that certain source files do not include all required headers,
depending on the configure options passed to socat.

Work around the error by passing `-include stddef.h` via `TARGET_CFLAGS` to
forcibly inject this header file into all compilation units.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2017-02-05 19:38:38 +01:00
Peter Wagner 06525f0d3b ntpd: cleanup Makefile and hotplug script
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2017-02-05 19:38:37 +01:00
Peter Wagner 84c6db24fc ntpd: add hotplug script that signals when ntp reaches the stratum level like the sysntp implementation
use ntpq to check the status of the ntp server as all other status scripts included in the ntp tarball are
	based on perl which would dramatically increase the footprint of ntpd

Signed-off-by: Peter Wagner <tripolar@gmx.at>
2017-02-05 19:38:14 +01:00
p-wassi 0f4b5c25b8 libs/liboping: update to 1.9.0
Update liboping/oping/noping to upstream release 1.9.0
Also introduce new location of downloads and correct
the licence to LGPL-2.1+ (as seen in liboping's README)

Signed-off-by: Paul Wassi <p.wassi@gmx.at>
2017-02-05 19:36:51 +01:00
Toke Høiland-Jørgensen 2ff08b58f6 sqm-scripts: Bump to v1.1.3 2017-02-03 17:06:43 +01:00
Philip Prindeville 3d4048bd9f rng-tools: start rngd early enough to actually be useful
lighttpd starts at priority 50, but promptly calls getrandom() on
initialization (li_rand_reseed() and li_rand_device_bytes() from
server_init()). If /dev/urandom (which getrandom() uses by default)
doesn't have sufficient entropy, this will block.

Since Openwrt runs the startup scripts serially, this can block
initialization indefinitely.  I've seen 15-20 minutes typically.

Seeding the pool early on can quickly built sufficient entropy to
complete booting without blocking.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit 901ef617c7)
2017-02-03 12:52:51 +02:00
Jo-Philipp Wich 5c749ad53e vnstat: update to v1.16
Updates vnStat to the latest stable version, drops obsolete patches.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2017-01-30 14:23:28 +01:00
Dirk Brenken 439538c4f0 adblock: bugfix 2.1.5 (release 2)
* fix wget/uclient-switch

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 12c345d803)
2017-01-30 09:33:21 +02:00
Toke Høiland-Jørgensen 31d89be9e6 sqm-scripts: Bump to v1.1.2, depend on kmod-sched-core
The needed shaper modules are now in kmod-sched-core, so we don't need
to depend on the full kmod-sched anymore.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2017-01-29 17:12:27 +01:00
Ted Hess 4a067ba4a6 Merge pull request #3916 from luizluca/lede-17.01
[lede-17.01] libvpx: bump to 1.6.1
2017-01-25 21:41:41 -05:00
Luiz Angelo Daros de Luca 28d1e7b77b libvpx: bump to 1.6.1
v1.6.1:
- Faster VP9 encoding and decoding
- Bug Fixes

Now the ABI_VERSION is derived from PKG_VERSION

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2017-01-25 23:14:49 -02:00
Dirk Brenken 6b3baa3b27 adblock: update 2.1.5
* fix init boot function
* made fetch utility check more bullet proof
* automatically switch between default wget & uclient-fetch
configuration
* output link to online documentation on error
* update documentation

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 92c098fc02)
2017-01-23 17:41:46 -05:00
Álvaro Fernández Rojas 5aa0c8b54b unzip: patch CVE-2014-9913 and CVE-2016-9844 vulnerabilities
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
2017-01-23 17:54:52 +01:00
Toke Høiland-Jørgensen bf540fdc19 sqm-scripts: Bump to v1.1.1, depend on kmod-sched-cake
This release contains several bug fixes for LEDE-17.01. The
kmod-sched-cake dependency is to avoid having scripts that fail
silently.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2017-01-22 20:12:00 +01:00
Stijn Tintel 18d88e0bd5 vallumd: bump to 0.1.2
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-01-21 14:54:44 +01:00
Ted Hess 0f87103183 Merge pull request #3890 from dibdot/lede-17.01
[lede-17.01] travelmate: bugfix 0.3.2
2017-01-21 07:44:39 -05:00
Dirk Brenken ba29305c15 [lede-17.01] travelmate: bugfix 0.3.2
* refine/speed-up (re-)connect handling
* fix minor build error in init script
* better logging & cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
2017-01-21 07:37:04 +01:00
Ted Hess 91ffca6907 icecast: Fix configure if both vorbis and tremor host packages installed
Signed-off-by: Ted Hess <thess@kitschensync.net>
(cherry picked from commit c82573e64e)
2017-01-20 15:16:54 -05:00
Daniel Engberg 82def2c089 net/socat: Update to 1.7.3.1 and fix SSL
Update to 1.7.3.1
Fix SSL builds
Source: http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/net/socat/patches/#dirlist

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
(cherry picked from commit 8c0a4bf6c5)
2017-01-20 15:14:03 -05:00
Dirk Brenken 27c4d41ebb adblock: bugfix 2.1.2
* fix minor build error in init script

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit d960507c5f)
2017-01-20 15:05:22 -05:00