Commit Graph
16196 Commits
Author SHA1 Message Date
Rosen PenevandGitHub 3f20518a34 giflib: Add PKG_CPE_ID for proper CVE tracking
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-21 12:44:24 -07:00
Rob MosherandRob Mosher e3144f00a3 cshark: update to latest git HEAD
This fixes GCC8 compile due to buffer overrun

Signed-off-by: Rob Mosher <nyt-openwrt@countercultured.net>
2018-08-21 13:39:31 -04:00
Yousong Zhou 1b485efbcb openvswitch: bump to version 2.10.0
- Rebased the python target/host separation patch
 - Dropped the now-in-upstream openssl-1.1 compat patch
 - Added a patch to disable tests/

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2018-08-21 13:51:37 +00:00
Jo-Philipp WichandGitHub e3edf8fd01 Merge pull request #6819 from tru7/emailrelay
emailrelay: add some runtime options
2018-08-21 15:33:19 +02:00
Jianhui Zhao 826e9366b0 libuwsc: Update to 2.0.5
Signed-off-by: Jianhui Zhao <jianhuizhao329@gmail.com>
2018-08-21 18:11:28 +08:00
Hannu NymanandGitHub cbd9cc2b28 Merge pull request #6679 from zhouruixi/nginx_dav_master
nginx: Add missing WebDAV methods support (PROPFIND & OPTIONS)
2018-08-21 11:50:06 +03:00
Rosen PenevandGitHub 456ae2f541 freetype: Add PKG_CPE_ID for proper CVE tracking
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-20 21:40:57 -07:00
Rosen Penev 20fe720732 flac: Fix CVE-2017-6888
Added PKG_CPE_ID for proper CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-20 21:38:07 -07:00
Rosen Penev 4c59ee99e9 confuse: Update to 3.2.2
Fix for CVE-2018-14447

God rid of pointless autoreconf.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-20 20:59:34 -07:00
Rosen PenevandGitHub 0e29ec3ca0 cyrus-sasl: Update to 2.1.27-rc8
Added PKG_CPE_ID for proper CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-20 20:53:53 -07:00
Rosen Penev 193b7ea072 vim: Update to 8.1
Switch URL to HTTP. More reliable.

Added PKG_CPE_ID for proper CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-20 20:34:21 -07:00
Rosen PenevandGitHub ec71565acf yara: Update to 3.8.1
Switched URL to codeload. The previous redirects to this one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-20 20:07:01 -07:00
Carlos Miguel Ferreira e0e80c1d2c boost: Package Version Update -> 1.68.0
This package update provides one new library:
 - YAP: An expression template library for C++14 and later, from Zach Laine [1].

More info can be found at the usual place [2].

[1] : https://www.boost.org/libs/yap/
[2] : https://www.boost.org/users/history/version_1_68_0.html

Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>
2018-08-21 02:13:59 +01:00
Ruixi Zhou fa257720ab nginx: Add missing WebDAV methods support (PROPFIND & OPTIONS)
Nginx provide WebDAV methods PUT, DELETE, MKCOL, COPY, and MOVE with
http_dav_module. But most WebDAV clients that require additional WebDAV
methods (PROPFIND & OPTIONS) to operate. Add missing methods support
with Arutyunyan Roman (arutyunyan.roman@gmail.com)'s nginx-dav-ext-module.
(see: http://nginx.org/en/docs/http/ngx_http_dav_module.html
https://github.com/arut/nginx-dav-ext-module)

Example config:
	location / {
		dav_methods PUT DELETE MKCOL COPY MOVE;
		dav_ext_methods PROPFIND OPTIONS;

		root /var/root/;
	}

Signed-off-by: Ruixi Zhou <zhouruixi@gmail.com>
2018-08-21 08:14:44 +08:00
Robby K bb7b3204e0 freeradius3: Enable the EAP-PWD module.
This enables the EAP-PWD module, which allows for logging in with only
a username and password, while still being secure (see the links below
for the details of this EAP method, if interested).

https://en.wikipedia.org/wiki/Extensible_Authentication_Protocol#EAP_Password_(EAP-PWD)

Also found this blog post which talks about EAP-PWD and its benefits:
https://dustri.org/b/eap-pwd-wifi-security-done-right.html

Signed-off-by: Robby K <robbyke@gmail.com>
2018-08-20 20:02:14 +02:00
Othmar Truniger 432cc99d9a emailrelay: add some runtime options
Signed-off-by: Othmar Truniger <github@truniger.ch>
2018-08-20 19:29:41 +02:00
Hannu NymanandGitHub d9749c257b Merge pull request #6602 from neheb/patch-17
evtest: Switch to tarballs
2018-08-20 20:08:43 +03:00
Dirk BrenkenandGitHub 83c225812b Merge pull request #6668 from cotequeiroz/emailrelay_pam
emailrelay: avoind linking with -lpam
2018-08-20 18:14:56 +02:00
Dirk BrenkenandGitHub 31a3852044 Merge pull request #6747 from mark0n/fix-curl-variable
ddns-scripts: Fix problems detecting if curl is SSL capable
2018-08-20 18:04:16 +02:00
Martin KonradandMartin Konrad c9b5b02200 ddns-scripts_route53-v1: Fix problems detecting curl
Ensure cURL is installed and has SSL support. This fixes
issue 6744.

Signed-off-by: Martin Konrad <info@martin-konrad.net>
2018-08-20 11:30:37 -04:00
Hannu NymanandGitHub fee4bb8e64 Merge pull request #6789 from Ansuel/fixuwsgi
uwsgi-cgi: improve luci support
2018-08-20 18:04:29 +03:00
Hannu NymanandGitHub 70e991b394 Merge pull request #6788 from Ansuel/fixnginx
nginx: improve luci config
2018-08-20 18:04:05 +03:00
Ansuel Smith c94a9968f7 uwsgi-cgi: improve luci support
Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2018-08-20 14:56:26 +02:00
Ansuel Smith 0f21ab6391 nginx: improve luci config
Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2018-08-20 14:55:53 +02:00
Karl Palsson 97869b7a25 net/mosquitto: update to 1.5.1
Bugfix release.  Full changelog at:
https://mosquitto.org/blog/2018/08/version-151-released/

Of most interest to OpenWrt:
* Remove use of AI_ADDRCONFIG, which means the broker can be used on systems where only the loopback interface is defined.
* Fix IPv6 addresses not being able to be used as bridge addresses.
* Fix problem opening listeners on Pi caused by unsigned char being default.
* Fix segfault on startup if bridge CA certificates could not be read.
* Fix possible endian issue when reading the memory_limit option.
* library and client bugfixes including: https://github.com/openwrt/packages/issues/6765

Signed-off-by: Karl Palsson <karlp@etactica.com>
2018-08-20 10:47:44 +00:00
Dirk BrenkenandGitHub 5b5e20dfc2 Merge pull request #6810 from Andy2244/rpcbind-update
rpcbind: update to 1.2.5
2018-08-20 10:17:57 +02:00
Dirk BrenkenandGitHub d872a0dbc4 Merge pull request #6784 from neheb/patch-21
python-pyasn1: Update to 0.4.4
2018-08-20 09:49:01 +02:00
Dirk BrenkenandGitHub f6e18184a1 Merge pull request #6785 from neheb/patch-22
python-urllib3: Update to 1.2.3
2018-08-20 09:25:32 +02:00
Dirk BrenkenandGitHub 984d9dbfbd Merge pull request #6813 from neheb/sudo
sudo: Update to 1.8.24
2018-08-20 09:24:07 +02:00
Rosen Penev b2427ca1cf python-urllib3: Update to 1.23
Use a better URL.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-19 20:47:21 -07:00
Yousong Zhou 9400257639 qemu: tighten up CONFIGURE_ARGS spec
This is more for readability, no functional change

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2018-08-20 02:43:56 +00:00
Yousong Zhou 41c3a2e0a5 qemu: bump to version 3.0.0
Also switch to domain download.qemu.org and .xz files

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2018-08-20 02:38:56 +00:00
Rosen PenevandGitHub 683d833150 ffmpeg: Add CPE ID for proper CVE tracking
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-19 15:19:32 -07:00
Rosen PenevandGitHub 9be580359e c-ares: Add CPE ID to track CVEs
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-19 15:13:18 -07:00
Rosen PenevandGitHub 61cdf7b4d6 avahi: Add CPE ID to track CVEs
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-19 15:05:41 -07:00
Peter Wagner 8f8fa47234 ntpd: update to 4.2.8p12
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2018-08-19 23:38:02 +02:00
Rosen Penev 8ce9f30c42 sudo: Update to 1.8.24
Changed URLs to HTTPS

Rearranged Makefile for consistency.

Added PKG_BUILD_PARALLEL for faster compilation.

Added PKG_CPE_ID for CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-19 14:21:33 -07:00
Philip PrindevilleandGitHub 8d710085da Merge pull request #6812 from pprindeville/perl-cgi-4.40
perl-cgi: Update to 4.40
2018-08-19 14:51:36 -06:00
Philip Prindeville c4dbc0147f perl-cgi: Update to 4.40
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2018-08-19 14:26:15 -06:00
Daniel F. Dickinson 2b7531ad9f doveco: pigeonhole: Use stock dovecot dir locations
We move dovecot libexec binaries and modules (including the package
pigeonhole) to their standard locations.  This is okay for libexec
because it was added to core prior to 17.04 release.  Moving the
binaries normally in libexec eliminates the reason the modules were in an
unusual directory, which is that there were conflicts with
libexec binaries that were in lib, which the modules normally use.

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2018-08-19 14:35:38 -04:00
Daniel F. Dickinson f0fb968346 dovecot: Fix managesieve-login needs libdovecot-login
When trying to use managesieve my MUA complained sieve wasn't supported.
On investigation dovecot logs the following could be seen:

    Aug 16 00:28:44 managesieve-login: Fatal: master:
      service(managesieve-login): child 1430 returned error 127
    Aug 16 00:31:32 managesieve-login: Error: Error loading shared
      library libdovecot-login.so.0: No such file or directory
      (needed by /usr/lib/dovecot/managesieve-login)
    Aug 16 00:31:32 managesieve-login: Error: Error loading
      shared library libdovecot.so.0: No such file or directory
      (needed by /usr/lib/dovecot/managesieve-login)
    Aug 16 00:31:32 managesieve-login: Error: Error relocating
      /usr/lib/dovecot/managesieve-login: net_ip2addr: symbol not found

The issue (verified with readelf on non-working build and build with my fix)
is that there is no RPATH information in the pigeonhole binaries (like
managesieve-login).

The dovecot-config that is 'installed' in the staging dir
assumes that plugins will be built on the same host as the installed files.
The 'installed' dovecot-config (partial) looks like:

LIBDOVECOT='-L/usr/lib/dovecot -ldovecot'
LIBDOVECOT_LOGIN='-ldovecot-login -L/home/user/Build/openwrt/openwrt-ath79/staging_dir/target-mips_24kc_musl/usr/lib -lssl -lcrypto'
LIBDOVECOT_SQL=-ldovecot-sql
LIBDOVECOT_COMPRESS=-ldovecot-compression
LIBDOVECOT_LDA=-ldovecot-lda
LIBDOVECOT_STORAGE='-ldovecot-storage '
LIBDOVECOT_DSYNC=-ldovecot-dsync
LIBDOVECOT_LIBFTS=-ldovecot-fts

The solution I used was to modify dovecot-config to add the rpath to
DOVECOT_BINARY_LDFLAGS, and to replace references to host directories
with staging_dir directories.

This results in RPATH being added as it needs to be, and results in a working
version of dovecot+pigeonhole.

NB: I've also touched package version of pigeonhole as this change in dovecot
results in (needed) binary changes for pigeonhole.

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2018-08-19 14:35:23 -04:00
Hannu NymanandGitHub 53a912201c Merge pull request #6539 from neheb/patch-4
bluelog: Switch to GitHub tarball
2018-08-19 20:15:39 +03:00
Hannu NymanandGitHub d580202e38 Merge pull request #6488 from neheb/patch-2
alpine: Update to 2.21.9999
2018-08-19 20:14:34 +03:00
Jiri SlachtaandGitHub e3681cb107 Merge pull request #6780 from neheb/tiff
tiff: Fix remaining CVEs
2018-08-19 19:10:32 +02:00
champtarandGitHub be234c29b4 Merge pull request #6803 from neheb/monit
monit: Update to 5.25.2
2018-08-19 10:55:06 -04:00
champtarandGitHub 67bc803ed9 Merge pull request #6802 from neheb/patch-30
htop: Minor adjustments
2018-08-19 10:51:11 -04:00
Andy Walsh 7a88e515d0 rpcbind: update to 1.2.5
* update to 1.2.5
* fix wrong URL
* adapt to bin/sbin from new version

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-08-19 16:36:03 +02:00
Rosen Penev 18283b444b monit: Update to 5.25.2
Added PKG_BUILD_PARALLEL to speed up compilation times.

Added PKG_CPE_ID for proper CVE tracking.

A few other cosmetic changes.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-18 21:54:11 -07:00
Rosen Penev c0b9f73919 htop: Minor adjustments
Added PKG_CPE_ID for proper CVE tracking.

Fixed URLs. Changed to HTTPS as well.

Removed autoreconf as there is no patching being done.

PKG_BUILD_PARALLEL was enabled for faster building.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-18 21:33:25 -07:00
Rosen PenevandGitHub 7ea11eefc6 python-yaml: Update to 3.13
Switch URL to use a more standard location.

Add HTTPS to everything.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-18 14:21:49 -07:00