Commit Graph

5977 Commits

Author SHA1 Message Date
Jo-Philipp Wich 68aa303efb cgi-io: use O_TMPFILE for uploads and attempt to directly link target file
Create an anonymous inode in /tmp using O_TMPFILE and attempt to link the
file in place using linkat(). Only fall back to the old file copy when
linking the tempfile fails.

Avoids double memory use if both the temporary upload file and the
destination file are located in /tmp.

Ref: https://github.com/openwrt/luci/issues/3654
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 4f4a7e9532)
2020-03-04 09:52:49 +01:00
Jo-Philipp Wich 7f00eebab0 cgi-io: use dynamic memory for post decoding, support proc files
Allocate dynamic buffer memory for decoding post data and allow post
requsts up to 128KB compared to the previos 1KB limit.

Also support downloading /proc and /sys files by falling back to
chunked transfer encoding when the file size cannot be determined.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 39087eba18)
2020-03-04 09:52:49 +01:00
Diana Dragusin 801a908a17 phantap: add to 19.07
Signed-off-by: Diana Dragusin <diana.dragusin@nccgroup.com>
2020-03-03 03:42:33 -08:00
Karl Palsson abdbeb350e mosquitto: bump to 1.6.9
Full changelog: https://mosquitto.org/blog/2020/02/version-1-6-9-released/

Nothing of particular relevant to OpenWrt, just general fixes.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2020-03-02 10:04:06 +00:00
Karl Palsson 99efce0cd2 pagekite: add simple websockets and update syntax
Syntax now matches preferred upstream style.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>
2020-02-26 11:45:08 +00:00
Karl Palsson 42c7a7adbe pagekite: avoid redundant information in syslog
Patch from upstream: https://github.com/pagekite/libpagekite/commit/7b4587818564aa667f868249e9a8f1dc1d095fd3

Signed-off-by: Karl Palsson <karlp@tweak.net.au>
2020-02-26 11:45:08 +00:00
Karl Palsson 13e8c6ffed pagekite: bump to v0.91.200218
pings the front ends less aggressively, reducing cpu usage on the host.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>
2020-02-26 11:45:08 +00:00
Nikos Mavrogiannopoulos c3ff03a34c ocserv: updated to 0.12.6
Fixes: #11174

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-02-26 06:07:40 +01:00
Yousong Zhou 61970ece51 xl2tpd: fix building failure caused by pfc
Fixes openwrt/packages#10270

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 0412c20f1b)
2020-02-25 11:57:24 +08:00
Yousong Zhou 7fe2073756 xl2tpd: bump to version 1.3.15
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Ref: https://github.com/openwrt/packages/issues/11418
(cherry picked from commit 620ba386b4)
2020-02-25 11:57:24 +08:00
Marcos Del Sol Vives 2c0a307eeb acme: update to 2.8.5
Signed-off-by: Marcos Del Sol Vives <marcos@orca.pet>
[ fix for 19.07 branch ]
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2020-02-19 15:40:52 +01:00
Rosen Penev e29cc586f2 Merge pull request #11381 from wvdakker/openwrt-19.07
[Openwrt 19.07] Shorewall: Bump to 5.2.3.6
2020-02-18 14:50:45 -08:00
W. van den Akker 1c7b7cfdfa Shorewall6: Bump to version 5.2.3.6
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-02-18 16:36:26 +01:00
W. van den Akker 481e63febb Shorewall: Bump to version 5.2.3.6
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-02-18 16:36:09 +01:00
W. van den Akker 4f0e5c49d3 Shorewall6-lite: Bump to version 5.2.3.6
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-02-18 16:35:50 +01:00
W. van den Akker 7c8f5fd70b Shorewall-lite: Bump to version 5.2.3.6
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-02-18 16:35:33 +01:00
W. van den Akker 1fbf3e1795 Shorewall-core: Bump to version 5.2.3.6
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-02-18 16:34:58 +01:00
Christian Lachner 2f5b209873 haproxy: Update HAProxy to v2.0.13
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2020-02-17 11:00:48 +01:00
Rosen Penev 78d7c8aef5 knot: Do not try to build under ARC
liburcu does not support ARC.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 5ec47ca837)
2020-02-15 22:07:30 -08:00
Rosen Penev 8640d243ee Merge pull request #11296 from Andy2244/samba4-update-4.11.6-(19.07)
[19.07] samba4: update to 4.11.6, add new UCI option
2020-02-10 13:29:10 -08:00
Andy Walsh f5be481a4f ksmbd: update to 3.1.3, ksmbd-tools: update to 3.2.1, add smb1 support, add avahi support package
* ksmbd: update to 3.1.3
* ksmbd-tools: update to 3.2.1
* add new package build option "KSMBD_SMB_INSECURE_SERVER"
* enable smb1 support to kmod by default
* add new UCI option "allow_legacy_protocols" to section [globals]
* add avahi support package "ksmbd-avahi-service"

* ksmbd: release 3.1.3 version
* ksmbd: lock SMB2_QUERY_INFO_HE request with read lock
* ksmbd: fix potential racy between query_dir and ksmbd_vfs_empty_dir
* ksmbd: fix racy issue between deleting file and checking empty directory
* ksmbd: don't register interface which are member of bridge
* ksmbd: SO_REUSEADDR is no property of tcp_setsockopt
* ksmbd: release 3.1.2 version
* ksmbd: fix read caching buffer size as max_read_size
* ksmbd: fix the infinite loop of handling FSCTL_QUERY_ALLOCATED_RANGES
* ksmbd: use compounding for smb2 flush
* ksmbd: downgrade error message to debug in get_file_all_info
* ksmbd: rename usmbd to ksmbd.mountd in trvis-ci
* ksmbd: release 3.1.1 version
* ksmbd: does not work if ipv6 module is not loaded or compiled in
* ksmbd: capsule ifdef CONFIG_SMB_INSECURE_SERVER with smb1 codes
* ksmbd: capsule ifdef CONFIG_SMB_INSECURE_SERVER with smb1 codes
* ksmbd: update README file

* ksmbd-tools: release 3.2.1 version
* ksmbd-tools: revert "remove glib2.0 dependancy" patch
* ksmbd-tools: release 3.2.0 version
* ksmbd-tools: update how to restart ksmbd in README file
* Revert "ksmbd-tools: disable tbuf and rbuf caching by default"
* ksmbd-tools: disable tbuf and rbuf caching by default
* ksmbd-tools: replace usmbd prefix with ksmbd prefix
* ksmbd-tools: update README file
* ksmbd-tools: fix warning ignoring return value of 'fread'
* ksmbd-tools: downgrade unsupported command print to debug
* ksmbd-tools: remove GLIB_LIBS in Makefiles
* ksmbd-tools: rename usmbd, smbuseradd, smbshareadd to ksmbd.mountd, ksmbd.adduser and ksmbd.addshare
* ksmbd-tools: fix null pointer dereference in _list_remove
* ksmbd-tools: fix the sanity check fails depending on the password length
* ksmbd-tools: fix build error(not found glib.h)
* ksmbd-tools: remove glib-2.0 dependancy
* ksmbd-tools: update README to add libglib2.0-dev for Ubuntu preprequisite packages

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-02-10 15:02:51 +01:00
Andy Walsh 1a503986f1 samba4: update to 4.11.6, add new UCI option
* update to 4.11.6
* add new UCI option "allow_legacy_protocols" to section [samba]

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-02-10 14:54:48 +01:00
Rosen Penev 4906850936 dnsdist: fix compilation on PIE ARM64
$(FPIC) evaluates to -fpic on ARM64, breaking compilation:

The dnsdist build system handles it properly anyway. Added --with-pic to
make it explicit.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7ddb2ddc45158669990374968da87a62a2e9e2e2)
2020-02-09 18:51:09 -08:00
Rosen Penev f815a74160 Merge pull request #11281 from micmac1/apache-19.07-up
[19.07] apr/apr-util/apache/subversion: sync with master
2020-02-09 14:51:27 -08:00
Sebastian Kemper 9e551f1b3e apache: add postinstall script
This script notifies users about the changes that recently went into the
package, to prevent surprises.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-02-08 23:47:48 +01:00
Sebastian Kemper 019b8fd057 subversion: fix build failure
Since commit a62c0e5 apu-1-config is no longer being stipped down with
regards to being called with "--link-libtool". Example:

 $ ./staging_dir/target-mips_24kc_musl/usr/bin/apu-1-config --link-libtool
 -L/home/sk/tmp/openwrt/staging_dir/target-mips_24kc_musl/usr/lib -R/home/sk/tmp/openwrt/staging_dir/target-mips_24kc_musl/usr/lib -laprutil-1
 $

Before the mentioned commit the "-R" argument was stripped off. And when the
Makefile adds this to TARGET_LDFLAGS this then ends up in the compiler test, as
an argument for the compiler, causing build failure:

checking whether the C compiler works... no
configure: error: in `/builder/shared-workdir/build/sdk/build_dir/target-arm_mpcore+vfp_musl_eabi/subversion-1.13.0':
configure: error: C compiler cannot create executables

config.log shows what's wrong:

configure:3140: x86_64-openwrt-linux-musl-gcc -Os -pipe ... <snip> ... -R/home/sk/tmp/sdk/master-x86-64/staging_dir/target-x86_64_musl/usr/lib -laprutil-1     conftest.c  >&5
x86_64-openwrt-linux-musl-gcc: error: unrecognized command line option '-R'

This commit does away with these flags, they're not needed anyway. FPIC
is also removed, because it's detrimental to the applications [1] and
unnecessary as well.

Fixes: #11139

[1] https://wiki.gentoo.org/wiki/Project:Hardened/Position_Independent_Code_internals

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-02-08 23:39:49 +01:00
Sebastian Kemper 8b238c8402 subversion: add libsqlite3 depend
apr-util was updated. It doesn't provide the depend on libsqlite3
anymore, so this needs to be added to the subversion package now.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-02-08 23:39:26 +01:00
Sebastian Kemper 623ae46141 apache: bump to 2.4.41 & sync with master
This is a squash of the following cherry-picked commits:

14f4f0bef0
4e6bdd8a49
c8aba5113b
2d188fd37f
31e0d618e5
39e68309e8
a1472254db
d6476f30bb
258967b0d2
e94a08298e
6bd63d24f0
66bb68a7b6
d44ad09fcd

Short summary:

- version is bumped to 2.4.41
- httpd is renamed to apache2 to avoid overwriting of other servers (for
  instance busybox's httpd)
- the name apache2 is now also used for directories, for instance
  /etc/apache2 instead of /etc/apache
- a simple init script it added (/etc/init.d/apache2)
- a user "apache" is added upon package installation and used by default
- adds the Apache modules (in the main package as well as in additional
  packages)
- Makefile and patches are updated and cleaned
- adds myself as maintainer
- improves the cross-compile setup (via configure variables, patches &
  sed scripts)
- apxs is fixed up so that external modules can be added easily

For more details please check the individual commits provided above.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-02-08 22:14:48 +01:00
Robby K c417bddda7 freeradius3: Enable the rlm_python and rlm_python3 modules.
Signed-off-by: Robby K <robbyke@gmail.com>
2020-02-07 17:18:50 +01:00
Robby K 4d16e3ae3f freeradius3: Fix proxy.conf file conflict.
It was provided by both the freeradius3 and freeradius3-mod-realm packages.
Now provided by the freeradius3 package only.

Signed-off-by: Robby K <robbyke@gmail.com>
2020-02-07 17:18:33 +01:00
Rosen Penev 4332642902 Merge pull request #11213 from adde88/openwrt-19.07
[19.07] hcxtools: update to latest version
2020-02-03 17:06:07 -08:00
Andreas Nilsen f828174de0 hcxtools: update to 5.3.0 + changes to Makefile to include latest binaries being compiled
Signed-off-by: Andreas Nilsen <adde88@gmail.com>

hcxdumptool: forgot to add new openssl dependency

Signed-off-by: Andreas Nilsen <adde88@gmail.com>
2020-02-03 17:32:15 +01:00
Josef Schlehofer afb4bb4c2b dnscrypt-proxy2: update to version 2.0.39
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 561b535c36)
2020-02-03 10:00:12 +01:00
Josef Schlehofer ba9262f04c dnscrypt-proxy2: update to version 2.0.36
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 8eb0d55475)
2020-02-03 10:00:06 +01:00
Hannu Nyman 98499ee44f Merge pull request #11214 from Andy2244/wsdd2-fix_typos-(19.07)
[19.07] wsdd2: fix typos
2020-02-02 20:19:25 +02:00
Dirk Brenken 8dffab34b4 adblock: update 3.8.15
* remove 'reg_cz' list (abandoned)
* add 'notracking' list (provided by @rcarmo)
* 19.07-only: fix/bring back status message

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-02-02 15:36:04 +01:00
Andy Walsh 00a1294d0f wsdd2: fix typos
* fix typos (WG_PARM, reload_trigger)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-02-02 15:06:34 +01:00
Andreas Nilsen da3df8f6c2 hcxdumptool: update to 6.0.1
Signed-off-by: Andreas Nilsen <adde88@gmail.com>
2020-02-02 14:04:28 +01:00
Olivier Poitrey 752070f843 nextdns: Update to version 1.4.23
Changelog:

* Fix OpenWRT with existing forwarder + fix dnsmasq restore issue
* Refactor service execution to better report errors
* Refactor merlin tz setup so it does not need to curl on boot
* Improve upgrade command for install.sh
* Do not mask curl error on install
* Fix timezone logging issue with Merlin
* Add support for Merlin John's fork
* Add raspbian support to installer
* Fix upgrade not reinstalling service
* Limit the aarch64 fix to merlin
* Reset DHCP DNS to self on Merlin router setup
* Fix memory issue with aarch64 based router
* Update Go version
* Allow override of detected env
* Setup timezone correctly on Merlin init script
* Don't ignore curl error on install
* Fix Asus Merlin John’s fork trust store issue
* Fix synology auto setup
* Fix report client info not enabled with setup-router option
* Add support for edgeos DHCP lease file locations
* Fix signal handling when running as a service
* Fix exit menu keyboard shortcut
* Do not fail on upgrade if uninstall failed
* Fix exit menu in installer
* Remove failing upx (for now)
* Make sure nextdns keeps running once ssh session is closed
* Add auto setup of Synology with DHCP server enabled
* Use router's DNS to discover more names
* Get A/AAAA from both answer and addition sections
* Ignore certain invalid names during discovery
* Fix activate with setup-router
* Fix serveral install issues
* Add exponential backoff to mdns probe retry
* Correctly end dhcp lease probing when discovery is cancelled
* Store DHCP/MDNS discovered addrs separately to avoid ping/pong
discovery
* Add DHCP lease support to client discovery
* Do not report mdns listen unreachable error as start will retry
* Reimplement mdns client discovery
* Fix installer GOARCH detection with arm6+
* Fix bin install on platforms needing sudo
* Correctly detect edgeos and ddwrt as routers
* Fix install.sh sudo
* Disable upx as it break many platforms
* Fix installer regression with merlin
* Fix mips64 detection
* Fix OpenWRT detection
* Fix UPX post build script
* Fix install with John's Asuswrt-Merlin fork
* Fix more DDWRT
* Fix DDWRT support
* Fix merlin service add/remove
* Use UPX to compress binaries typicially used on routers
* Revert "Remove direct dep on reflect"
* Use letters for installer menus
* Fix install script for upgrades not working if binary is running
* Do not return an error on mdns listen if at least one interface worked
* Fix installer for synology
* Fix pfSense support
* Remove the logs for each server on each connect
* Move install instructions to wiki
* Fix install.sh uid detection with merlin
* Fix install.sh for arm6+
* Add Synology init system support
* Fix install.sh
* Add a generic router setup that just changes the listen to public
* Update README
* Add auto setup support for EdgeOS
* Restore per OS install instruction in readme during installer beta
* Refactor install.sh
* Remove dep on golang.org/x/net/ipv[4|6]
* Remove direct dep on reflect
* Rewrite the zeroconf code to use dnsmessage instead miekg/dns
* Add auto setup support for DD-WRT
* Improve arch detection
* Add auto setup support for OpenWRT
* Add automatic router setup support
* Fix service
* Remove dep en seq on sysv style init scripts
* Add Entware init system support
* Report init system used on install and in UA
* Add EdgeOS support
* Reads /etc/hosts before forwarding queries to the upstream
* Fix localhost resolution with Linux arch empty /etc/hosts
* Use /etc/hosts file to resolve listen address and list on all IPs
listed
* Add support for multiple router firmware
* Fix hardened privacy disabling dual stack
* Add a config set sub command and refactor commands handling
* Add support for activate on freebsd
* Fix inverted MAC matching
* Add unit test for conf prefix match #35
* Activate uses listen address instead of static 127.0.0.1
* Improve FreeBSD integration
* Add FreeBSD support
* Fix a typo
* Use zip for windows archive

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

Edited PKG_RELEASE to 1
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit a3b028b357)
2020-02-01 09:58:58 +02:00
Ansuel Smith 2c4e6a5390 uwsgi: backport master changes to 19.07
To support new luci version uwsgi has been changed.
Backport this changes to 19.07

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2020-01-31 23:13:34 +01:00
Ansuel Smith 8b5c2901c0 nginx: backport master changes to 19.07
Currently luci is broken in 19.07.
Changes done to fix this problem didn't merge in the
19.07 release.

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2020-01-31 23:13:34 +01:00
Nicholas Smith cac10393e2 modemmanager: add ModemManager to packages
Signed-off-by: Nicholas Smith <nicholas.smith@telcoantennas.com.au>
2020-01-28 11:52:04 +10:00
Rosen Penev cd81e4f06f Merge pull request #11143 from Andy2244/smbd-rename_ksmbd-update-3.1.1-(19.07)
[19.07] smbd: update to 3.1.1, rename to "ksmbd", "ksmbd-tools"
2020-01-27 15:48:22 -08:00
Andy Walsh fd5a51ac04 wsdd2: update for renamed smbd->ksmbd
* update for renamed smbd->ksmbd
* fix build warning for global network.sh include

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-01-27 22:16:27 +01:00
Andy Walsh 82b463b19f smbd: update to 3.1.1, rename to "ksmbd", "ksmbd-tools"
* rename smbd->ksmbd (upstream name change)
* ksmbd-tools: build with static glib2 (usmbd = ~90kb, smbuseradd = ~40kb)
* new etc folder location = /etc/ksmbd/smb.conf
* new database name = /etc/ksmbd/ksmbdpwd.db
* fixes "map to guest = Bad User" while userdb is also used
* fixes missing ipv6 support
* update/rename to "luci-app-ksmbd"
* remove UCI samba compatibility code for section names (ksmbd uses [share] + [globals] not [sambashare] + [global])

* ksmbd: release 3.1.1 version
* ksmbd: does not work if ipv6 module is not loaded or compiled in
* ksmbd: capsule ifdef CONFIG_SMB_INSECURE_SERVER with smb1 codes
* ksmbd: release 3.1.0 version
* ksmbd: fix over 80 character warnings
* ksmbd: rename smbd-tools to ksmbd-tools in travis.yml
* ksmbd: fix password db file location in travis.yml
* ksmbd: rename smbd prefix function to ksmbd
* ksmbd: rename smbd prefix source files to ksmbd
* Revert "smbd: set connection status with SMBD_SESS_EXITING instead of direct destory"
* ksmbd: rename smbd to ksmbd in .travis.yml
* smbd: rename module name to ksmbd.ko
* smbd: set connection status with SMBD_SESS_EXITING instead of direct destory
* smbd: previous session with same user and same password should be deleted
* smbd: only use global session table in smb2 session
* smbd: add support for ipv6
* smbd: fix empty macro issue from smbd_debug
* cifsd: fix printing of file names in find_next

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-01-27 22:03:28 +01:00
Hannu Nyman 1e43dc8f81 Merge pull request #11123 from stangri/19.07-https-dns-proxy
[19.07] https-dns-proxy: fix deleting server items, configurable dnsmasq settings change
2020-01-26 22:39:33 +02:00
Robby K b3c1a67ff1 freeradius3: Update to 3.0.20
Latest stable release, contains security fixes for EAP-PWD (side-channel leak), logrotate settings (CVE-2019-10143) and a DoS issue due to multithreaded BN_CTX access (CVE-2019-17185).

Also refreshed patches/002-disable-session-cache-CVE-2017-9148.patch due to the following changes/commits in freeradius:
https://github.com/FreeRADIUS/freeradius-server/commit/bf1a1eda2387745bbe538998f3d2e6514f981bfd
https://github.com/FreeRADIUS/freeradius-server/commit/a3c46544b38ab46218c385d0ee197538fad5b3da

Signed-off-by: Robby K <robbyke@gmail.com>
2020-01-26 14:43:06 +01:00
Stan Grishin a9fd019a3d https-dns-proxy: fix deleting server items, configurable dnsmasq settings change
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-01-25 21:14:56 -07:00
Dennis Dast ea93089afd radicale-py3: Add python3-urllib dependency
Depend on python3-urllib instead of python3-email (python3-urllib has
python3-email as a dependency).

Signed-off-by: Dennis Dast <mail@ddast.de>
2020-01-20 20:59:41 +01:00
Matt Merhar 72af40f2ba nut: fix other/otherflag custom variables in nut-server.init
This allows custom config parameters to be added to the generated config
files, enabling the original intended functionality per
https://openwrt.org/docs/guide-user/services/ups/software.nut.

Example usage from /etc/config/nut_server:

config driver 'apc'
	option driver 'snmp-ups'
	option snmp_version 'v3'
	option port '172.16.100.5'
	list other 'secLevel'
	list other 'secName'
	list other 'authPassword'
	list otherflag 'notransferoids'

config other 'other_secLevel'
	option value 'authNoPriv'

config other 'other_secName'
	option value 'some_username'

config other 'other_authPassword'
	option value 'some_password'

config other 'otherflag_notransferoids'
	option value '1'

Signed-off-by: Matt Merhar <mattmerhar@protonmail.com>
(cherry-picked from 0b04dd34a0)
2020-01-19 21:22:35 -08:00