Commit Graph
3961 Commits
Author SHA1 Message Date
Josef SchlehoferandGitHub c64a4e86c3 Merge pull request #9893 from BKPepe/bind-18.06
[OpenWrt 18.06] bind: update to version 9.11.10
2019-09-28 11:52:27 +02:00
Karl Palsson 03fb174ec7 net/mosquitto: bump to 1.5.9 for CVE
Fixes CVE-2019-11779
Release notes at https://mosquitto.org/blog/2019/09/version-1-6-6-released/

Signed-off-by: Karl Palsson <karlp@etactica.com>
2019-09-27 13:31:27 +00:00
Stan Grishin fb43709a64 simple-adblock: dnsmasq.ipset option support, better handling of IDNs, updated README
Signed-off-by: Stan Grishin <stangri@melmac.net>
2019-09-24 09:11:57 -07:00
W. Michael PetulloandJosef Schlehofer f587f31ad5 lighttpd: mark module configuration files
Signed-off-by: W. Michael Petullo <mike@flyn.org>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from 9cf412c0cb)
2019-09-11 10:50:45 +02:00
Josef Schlehoferandtripolar 8f42d4b714 wget: fix CVE-2018-20483
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-06 19:58:33 +02:00
Matthias Schiffer f6e7b56a58 fastd: fix init script for multiple VPN instances
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit b7ff8b8087)
2019-09-04 22:51:10 +02:00
Josef Schlehofer 2d9a3eff47 keepalived: add patch for CVE-2018-19115
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-01 17:42:25 +02:00
Josef Schlehofer e4508a3518 keepalived: Update to version 1.4.5
- Use HTTPS for PKG_SOURCE_URL and as well for URL in description

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-01 17:42:25 +02:00
Josef Schlehofer e0af45ff79 bind: Update to version 9.11.10
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-01 17:01:50 +02:00
Josef Schlehofer 6d8293801e lighttpd: fix CVE-2018-19052
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-01 13:15:34 +02:00
Rosen PenevandGitHub 55dcffd7fd Merge pull request #9841 from cshoredaniel/pr-18.06-nut-targetted
[18.06] Targeted fixes based on 19.07/master
2019-08-30 10:13:47 -07:00
Josef SchlehoferandGitHub bdddb2127f Merge pull request #9703 from BKPepe/squid-18.06
[OpenWrt 18.06] squid: update to version 3.5.28
2019-08-29 23:40:33 +02:00
Daniel F. Dickinson c1aa1f784c nut: Bump PKG_RELEASE
Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2019-08-27 01:22:41 -04:00
Daniel F. Dickinson 361e6aaaab nut: Handle FSD properly
Make sure we force shutdown of UPS only when we should, and when
we should that shutdown happens.

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2019-08-27 00:56:42 -04:00
Daniel F. Dickinson a2ab989c12 nut: Fix init actions (server/driver)
The server and driver were not starting/restarting reliably. In
addition on interface changes NUT got very confused.  So we fix
handling of restarts and add a reload trigger for interface
changes.

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2019-08-27 00:53:42 -04:00
Daniel F. Dickinson ef0bd01409 nut: Fix extra diver params config
Extra parameters for the UPS driver were not being handled correctly.
Fix that (was wrong variable name).

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2019-08-27 00:49:46 -04:00
Daniel F. Dickinson 77519cd204 nut: Fix permissions with runas
Fix directory and conf file creation and owner/mode setting
for when running as non-root.

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2019-08-27 00:47:16 -04:00
Daniel F. Dickinson e976846521 nut: Fix statepath handling
The statepath was getting the wrong permission and/or not created
at the right time.  This commit includes fixes for handling the
statepath (typically /var/run/nut).

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2019-08-27 00:47:16 -04:00
Daniel F. Dickinson 5f69f9a065 nut: Fix unset of runas user (ups server)
Running as non-root was failing due to misplace local keyword
causing runas to be unset from calling value.

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2019-08-27 00:46:51 -04:00
Daniel F. Dickinson ccdec71b5c nut: Fix bad check for conf exists
We were `cat`ing the file instead of just checking for non-empty
existance.  Fix that.

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2019-08-26 23:48:49 -04:00
Daniel F. Dickinson c963f0c297 nut: Fix upsmon init actions
1) For upsmon start and stop were at wrong position in rc.d
2) Stop needs more than just killing the procd instead but rather
needs a  stop command to be issued.
3) Interface up/down was causing not to enter a crashloop (we fix this
with procd trigger on interface changes).

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2019-08-26 23:43:16 -04:00
Daniel F. Dickinson d06bd2d7e3 nut: Fix unset of runas user (upsmon)
Running as non-root was failing due to misplace local keyword
causing runas to be unset from calling value.

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2019-08-26 23:38:10 -04:00
Daniel F. Dickinson 020dfd4541 nut: Remove unecessary libwrap dependency
CONFIG_ARGS has --without-wrap so libwrap as a dependency is
extraneous as it is not actually used.

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2019-08-26 23:18:05 -04:00
Tony Ambardarandguidosarducci 5640d6e68b speedtest-netperf: new package to measure network performance
The speedtest-netperf.sh script measures the network throughput while
monitoring latency under load and capturing key CPU usage and frequency
statistics. The script can emulate a web-based speed test by downloading
and then uploading from an internet server, or perform simultaneous
download and upload to mimic the stress of the FLENT test program.

It simplifies tasks such as validating ISP provisioned speeds or setting
up and fine-tuning SQM, directly on the router. The CPU usage details
can also help determine if the demands of SQM, routing and other tasks
such as the test itself are exhausting the device's CPUs.

This script leverages earlier scripts from the CeroWrt project used for
bufferbloat mitigation, betterspeedtest.sh and netperfrunner.sh. They are
used with the permission of the author, Rich Brown.

Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
(cherry-picked from 463590e2bc)
2019-08-23 13:32:08 -07:00
Rosen Penev 43f49bdbca apinger: Update to latest git revision
This project seems abandoned. Updated to latest version.

Also cleaned up the Makefile quite a bit.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from dff6d2639e)
2019-08-21 19:38:44 -07:00
Noah Meyerhans 3bdadf4d77 Merge branch 'pr/9778' into openwrt-18.06
PR #9778

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2019-08-21 07:44:18 -07:00
Matthias Schiffer 14219822ec fastd: update URL and PKG_SOURCE_URL
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
2019-08-21 16:18:18 +02:00
DENG QingfangandJosef Schlehofer 23eeeeadc8 bind: update to 9.11.9
Fixes CVEs:
CVE-2018-5738
CVE-2018-5740
CVE-2018-5743
CVE-2018-5744
CVE-2018-5745
CVE-2019-6465
CVE-2019-6471

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[mention fixed CVEs;patches: refreshed and removed those which are in
upstream now]
2019-08-19 23:24:56 +02:00
Rosen Penev 01466e76e9 lcdringer: Remove libcheck dependency to fix compilation
libcheck is some kind of testing framework. it is not only unnecessary, it
is not even used in the code.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-08-18 11:41:48 -07:00
Stan Grishin 8e8087706d [18.06] simple-adblock: support for varios DNS resolvers/options
Signed-off-by: Stan Grishin <stangri@melmac.net>
2019-08-17 06:09:43 -07:00
Rosen Penev a4314b868c linknx: Fix compilation with libiconv
Based on ee94a1e912

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-08-16 13:02:54 -07:00
Eneas U de QueirozandRosen Penev ca99a333e5 rp-pppoe: redo glibc patch
Previous fix broke compilation with kernel < 4.8

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
(cherry-picked from e40d67a48f)
2019-08-16 12:56:26 -07:00
Eneas U de QueirozandRosen Penev 5327a95d66 rp-pppoe: Fixed compilation with glibc
Do not inlcude <netinet/in.h> when using glibc to avoid various
redefinitions.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
(cherry-picked from 0c995cabe7)
2019-08-16 12:55:48 -07:00
Guo Liandtripolar d921407d42 openssh: fix pthread functions redefine with pam module
we should pass -DUNSUPPORTED_POSIX_THREADS_HACK to CFLAGS to openssh
to prevent function redefine, I don't know why pam module use
micro UNSUPPORTED_POSIX_THREADS_HACK to detect whether define
pthread functions, but not detect whether define
UNSUPPORTED_POSIX_THREADS_HACK.

Signed-off-by: Guo Li <uxgood.org@gmail.com>
2019-08-15 11:54:09 +02:00
Rosen Penev ad26261e18 iodine: Fix compilation with uClibc-ng
daemon is supported now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 3226673a48)
2019-08-13 15:03:23 -07:00
Josef Schlehofer 1607a5bd8b squid: update to version 3.5.28
Fixes CVEs:
CVE-2018-1000024
CVE-2018-1000027
CVE-2018-1172

Add patches from Squid Proxy Cache Security Update Advisory:
http://www.squid-cache.org/Advisories/SQUID-2018_4.txt
http://www.squid-cache.org/Advisories/SQUID-2018_5.txt
http://www.squid-cache.org/Advisories/SQUID-2019_3.txt
http://www.squid-cache.org/Advisories/SQUID-2019_6.txt

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-08-12 23:16:59 +02:00
Josef SchlehoferandYousong Zhou 243f921ae1 subversion: update to version 1.10.6
Most interesting changes:
- Fixes CVEs
1.10.6
- CVE-2018-11782
- CVE-2019-0203
1.10.4
- CVE-2018-11803

Other misc changes:
- Fixes indentation in Makefile
- Reorder some things in Makefile to be sync with other packages
- Use HTTPS in URL

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-08-06 11:19:41 +08:00
Rosen Penev d6145ce0c6 quassel-irssi: Fix compilation with GCC8
It throws new warnings which triggers -Werror. Remove it.

Added support for full NLS.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
)cherry picked from 623d25a86b)
2019-08-03 12:06:33 -07:00
Rosen Penev 1eeea30fda softethervpn: Fix compilation under 64-bit targets
-m64 is not compatible with OpenWrt's compilers.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 23134b07de)
2019-07-28 20:32:37 -07:00
Rosen Penev 30ddc8a151 transmission: Fix compilation under uClibc-ng
Upstream has a patch for this dated 2016.

Also ran the init script through shellcheck.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from f4f665c7db)
2019-07-22 20:08:39 -07:00
Richard YuandRosen Penev 0cac0b3ebc transmission: add PKGARCH:=all for transmission-web
Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry-picked from eaeadff317)
2019-07-22 20:08:01 -07:00
Rosen Penev c2860ce2cf transmission: Add LTO support to shave off 35KB off of the ipk
Minor Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 70c34ef472)
2019-07-22 20:07:25 -07:00
Andrii KorzhandRosen Penev b5957aed64 transmission: Allow user to configure web ui home directory
Signed-off-by: Andrii Korzh <andrii.korzh@gmail.com>
(cherry-picked from 582f697afd)
2019-07-22 20:06:57 -07:00
Rosen Penev dddcd5d909 softethervpn: Add openssl to host build deps
Some hosts might be missing OpenSSL.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-07-22 20:04:33 -07:00
Rosen Penev 0a4f88e567 softethervpn: Really fix iconv support
softethervpn overrides nls.mk by defining its iconv functions. This only
works if the libc has iconv. In addition, it does not allow external
libiconv usage. TARGET_LDFLAGS is also the wrong place to add -liconv.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from fb480e297c)
2019-07-22 20:04:33 -07:00
Eneas U de QueirozandRosen Penev e05f50c128 softethervpn: add package name to build dir
Current build dir is set at just v$(PKG_VERSION).

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
(cherry-picked from 80b61c3e57)
2019-07-22 20:04:33 -07:00
Eneas U de QueirozandRosen Penev 8358aa6906 softethervpn: cleanup host/build, pass HOST_*FLAGS
Remove hack to avoid readline host dependency, now that readline is
being host/built.
Pass on HOST_CFLAGS, HOST_CPPFLAGS, & HOST_LDFLAGS, to fix buildbots
host-compile errors about not finding openssl headers.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
(cherry-picked from e3c6fcb796)
2019-07-22 20:04:32 -07:00
Rosen PenevandGitHub 04c9e6708f Merge pull request #9463 from ps790/patch-4
softethervpn: Update to rtm version 4.29-9680
2019-07-16 13:09:39 -07:00
Rosen PenevandGitHub 4265311c14 Merge pull request #9461 from ps790/patch-2
softethervpn: Pass FLAGS to CC for hamcorebuilder
2019-07-16 13:09:19 -07:00
Konstantin DeminandYousong Zhou ef44ef6980 bridge-utils: fix conflict with busybox brctl
Busybox brctl applet conflicts with the version from bridge-utils.
Fix this by using ALTERNATIVE support for brctl in bridge-utils.

Fixes openwrt/packages#8812

Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
[PKG_RELEASE bump]
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry-picked from commit fabd9efdea)
2019-07-12 09:11:12 +00:00