Commit Graph

15624 Commits

Author SHA1 Message Date
Josef Schlehofer e9748d34f5 bind: Update to version 9.14.7
Fixes CVE-2019-6475 and CVE-2019-6476

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 7b9af101f6)
2019-11-10 18:29:29 +01:00
Jakub Piotr Cłapa 91da56a942 perl: fixed host compilation of static perl on MacOS
All symbols on MacOS are prefixed with an underscore which
interfered with the filtering mechanism (added in perl 5.28)
for extension libraries to be linked into static perl.

Signed-off-by: Jakub Piotr Cłapa <jpc@loee.pl>
(cherry-picked from commit 3954356)
2019-11-10 18:28:23 +01:00
Jan Pavlinec bb00671ad4 libmaxminddb: update to version 1.4.2
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit 62a9110bc5)
2019-11-10 18:24:33 +01:00
Josef Schlehofer d60dbbed2c clamav: Update to version 0.101.4
Change deprecated options to a new one:
DetectBrokenExecutables to AlertBrokenExecutables
ArchiveBlockEncrypted to AlertEncrypted

Fixes: CVE-2019-12900 and CVE-2019-12625

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-11-10 17:00:43 +01:00
Rosen Penev ec6cd9b9c3 Revert "perl-www-curl: curl 7.66.0 compatibility"
This reverts commit 3d98d7fd05.

This was a bad backport.
2019-11-09 11:30:15 -08:00
Hannu Nyman 522aea0cad Revert "haproxy: Update patches for HAProxy v2.0.8"
This reverts commit 76a2da3fd4.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-11-09 10:16:33 +02:00
Hannu Nyman 22bcd9e784 Revert "haproxy: Rework hotplug script for HAProxy"
This reverts commit c9ee50d190.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-11-09 10:16:02 +02:00
Hannu Nyman b2febcc246 Merge pull request #10442 from gladiac1337/haproxy-2.0.8-up-owrt-19.07
[openwrt-19.07] haproxy: Update patches for HAProxy v2.0.8 + fix hotplug script
2019-11-09 09:42:01 +02:00
Dirk Brenken 7a1f32f704 banip: update 0.3.7
* fix a logical glitch in the hotplug event handler
* properly handle fatal iptables errors - even in subshells

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 49b43b81e8)
2019-11-08 19:19:18 +01:00
Dirk Brenken 848589d758 banip: update 0.3.6
* more startup tweaks
* re-use f_log function in helper scripts
* small fixes / polish up for forthcoming 19.07 release

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 72fba3a17b)
2019-11-08 19:18:52 +01:00
Dirk Brenken 7401166ea8 banip: update 0.3.5
* fix race condition in download utility detection during boot
* fix multiple possible bugs in ipset creation
* prevent parallel service starts
* refine service trigger handling
* add ssh daemon auto detection
* print to stdout if 'logger' is not available

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit fcea2f75c3)
2019-11-08 19:18:27 +01:00
Dirk Brenken be9e82b017 travelmate: update 1.5.2
* print to stdout if 'logger' is not available
* add support to set the service nice level (default is 0)
* small fixes / polish up for forthcoming 19.07 release

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 0d406b2a42)
2019-11-08 19:11:28 +01:00
Dirk Brenken fff155b2bf adblock: update 3.8.9
* more startup tweaks
* re-use f_log function in helper scripts
* small fixes / polish up for forthcoming 19.07 release

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 2c3cb6f1d1)
2019-11-08 19:08:52 +01:00
Dirk Brenken bc89112c27 adblock: update 3.8.8
* print to stdout if 'logger' is not available
* small fixes

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 9c82e9e282)
2019-11-08 19:08:43 +01:00
Hannu Nyman d6d1100c1e Merge pull request #10504 from Andy2244/samba-4.9.15-(openwrt-19.07)
[openwrt-19.07] samba4: update to 4.9.15
2019-11-08 19:58:07 +02:00
Andy Walsh 32a8209c55 samba4: update to 4.9.15
* update to 4.9.15
* fixes CVE-2019-10218, CVE-2019-14833, CVE-2019-14847
* update smb.conf.template (aio, sendfile)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-08 16:03:10 +01:00
Zachary Cook 349d73b2c3 sqm-scripts: Add required new depends for luci-app-sqm
The new luci-compat package is required to be able to run luci-app-sqm, see:
https://github.com/openwrt/luci/commit/d5dff8f9a5ca85d197cbb6037f95053bc55941e5

Signed-off-by: Zachary Cook <zachcook1991@gmail.com>
2019-11-08 12:20:13 +01:00
Toke Høiland-Jørgensen 5c51d658cf sqm-scripts: Bump to v1.4.0
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2019-11-08 12:20:07 +01:00
Jan Pavlinec 94c4c1304a libarchive: update to version 3.4.0
Changes:
remove backported patches
add bsdtar libopenssl variant
switch to github codeload
polish tab/spaces

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit 8f3378e86d)
2019-11-08 11:00:09 +01:00
Rosen Penev 31a01e46c7 Merge pull request #10414 from stangri/19.07-https-dns-proxy
[19.07] https_dns_proxy: implement dnsmasq integration
2019-11-06 14:54:01 -08:00
Yousong Zhou 6d5e468f2d circleci: skip compiling packages not enabled
E.g. some packages are target, or arch specific, skip compiling them if
they cannot be enabled for current sdk.  This should reduce false
positives for packages like docker-ce etc.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 4f3244db40)
2019-11-06 14:26:00 +00:00
Paul Spooren ef4de15df8 build: only install changed packages
Installing all packages via ./scripts/feeds install -a produces a lot of
error messages, it is also possible to only install the packages which
were touched by the PR.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit b8931afc94)
2019-11-06 14:25:38 +00:00
Josef Schlehofer 3f3c613ac5 btrfs-progs: Update to version 5.3.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 93254e6)
2019-11-05 23:48:01 +01:00
Josef Schlehofer bfcdf4e202 syslog-ng: Update to version 3.24.1
Bump version also in config file

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 72f8cda)
2019-11-05 23:14:00 +01:00
Josef Schlehofer 6f6c5d17c0 youtube-dl: Update to version 2019.10.29
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit fe5d1cdb93)
2019-11-05 22:50:54 +01:00
Josef Schlehofer af20f836e0 youtube-dl: Update to version 2019.10.22
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit c16b416356)
2019-11-05 22:50:43 +01:00
Alexandru Ardelean e31921f2af net: seahub: remove inexistent deps
This looks like something was not cherry-picked, or was cherry-picked
incorrectly. Those packages don't exist.

Warnings are:
```
WARNING: Makefile 'package/feeds/packages/seafile-seahub/Makefile' has a dependency on 'django-simple-captcha', which does not exist
WARNING: Makefile 'package/feeds/packages/seafile-seahub/Makefile' has a dependency on 'django-statici18n', which does not exist
WARNING: Makefile 'package/feeds/packages/seafile-seahub/Makefile' has a dependency on 'django-webpack-loader', which does not exist
```

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-11-05 22:32:33 +01:00
Rosen Penev 16657121a1 Merge pull request #10458 from jefferyto/python-cffi-1.13.2-openwrt-19.07
[openwrt-19.07] python-cffi: Update to 1.13.2
2019-11-04 09:28:13 -08:00
Jeffery To e1d9652edc python-cffi: Update to 1.13.2
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from c21eee0df4)
2019-11-04 23:45:03 +08:00
Jeffery To 07835fc26e golang: Update to 1.13.4
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 37facb63f5cc9906f4b32791b572506f68e0d79e)
2019-11-04 22:55:53 +08:00
Rosen Penev 3d4c934584 sispmctl: Reduce ipk size
Do not install static libraries or symlinks as actual files.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 238d6e1f90)
2019-11-03 10:31:56 -08:00
Rosen Penev 248c3d01fa sispmctl: Update to 4.2
Added license file.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 5decb769f4)
2019-11-03 10:31:56 -08:00
Luiz Angelo Daros de Luca c7bd76919f libgphoto2: libgphoto2_port.pc needed by dev
'pkg-config --exists libgphoto2' fails without libgphoto2_port.pc.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry-picked from c8fbe26c53)
2019-11-03 10:31:56 -08:00
Peter Liedholm 22ab1fcefe telldus-core: Doxygen in-file was not found.
Signed-off-by: Peter Liedholm <PeterFromSwe884@gmail.com>
(cherry-picked from 2a36c0421e)
2019-11-03 10:31:56 -08:00
Rosen Penev 42c85958fd treewide: Replace MD5SUM with HASH
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 5ae85b7952)
2019-11-03 10:31:55 -08:00
Sebastian Kemper 5bc62e00aa vim/host: fix build failures
Indeterminably vim/host fails on the build bots:

objects/fileio.o: In function `readfile':
fileio.c:(.text+0x5b3f): undefined reference to `libiconv_close'
fileio.c:(.text+0x61ad): undefined reference to `libiconv_close'
fileio.c:(.text+0x62f6): undefined reference to `libiconv'
fileio.c:(.text+0x6794): undefined reference to `libiconv_close'
objects/fileio.o: In function `buf_write_bytes':
fileio.c:(.text+0xa1fe): undefined reference to `libiconv'
fileio.c:(.text+0xa54a): undefined reference to `libiconv'
objects/fileio.o: In function `buf_write':
fileio.c:(.text+0xaf48): undefined reference to `libiconv_close'
objects/mbyte.o: In function `my_iconv_open.part.18':
mbyte.c:(.text+0x2ced): undefined reference to `libiconv_open'
mbyte.c:(.text+0x2d3a): undefined reference to `libiconv'
mbyte.c:(.text+0x2d5f): undefined reference to `libiconv_close'
objects/mbyte.o: In function `convert_setup_ext':
mbyte.c:(.text+0x33bf): undefined reference to `libiconv_close'
objects/mbyte.o: In function `string_convert_ext':
mbyte.c:(.text+0x363c): undefined reference to `libiconv'
collect2: error: ld returned 1 exit status
link.sh: Linking failed
Makefile:1949: recipe for target 'vim' failed

This is addressed by pulling in libiconv/host. Also configure switches
are added that keep external dependencies to a minimum, for instance
avoiding to link to X11 or gettext.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry-picked from dc727a2430)
2019-11-03 10:31:55 -08:00
Christian Lachner c9ee50d190 haproxy: Rework hotplug script for HAProxy
- The old hotplug script caused long boot-times for r7800 and
  possibly others. The new script is now only triggered by iface
  changes for wan and lan interfaces.

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-11-03 12:36:27 +01:00
Christian Lachner 76a2da3fd4 haproxy: Update patches for HAProxy v2.0.8
- Add new patches (see https://www.haproxy.org/bugs/bugs-2.0.8.html)

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-11-03 12:36:18 +01:00
Jeffery To 58ed21040c python,python3: Add PYPI_SOURCE_NAME to pypi.mk
This adds a new (optional) variable, PYPI_SOURCE_NAME, to pypi.mk.

For some PyPi packages (e.g. aiohttp_cors, click, django-compressor),
the name of the package and the source tarball name are slightly
different (usually by capitalisation or hyphen/underscore change).

This new variable is to make this difference explicit. PYPI_NAME is
meant for the "official" package name, whereas PYPI_SOURCE_NAME is meant
for the source tarball name.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry-picked from commit 1bacdd52f7)
2019-11-02 20:21:46 +01:00
Alexander Ryzhov c8113fcd05 google-authenticator-libpam: fix install section
Signed-off-by: Alexander Ryzhov <github@ryzhov-al.ru>
(cherry-picked from 422e8d9d1c)
2019-11-02 11:57:15 -07:00
Jeffery To 866b42c60e python,python3: Add pypi makefile
This adds pypi.mk, which can be included in Python packages that
download their sources from PyPI, to auto-fill various PKG_* variables
based on the value of PYPI_NAME.

This makefile should be included after $(TOPDIR)/rules.mk but before
$(INCLUDE_DIR)/package.mk (and $(INCLUDE_DIR)/host-build.mk).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry-picked from commit add4c42191)
2019-11-02 19:01:21 +01:00
Dirk Brenken 4900b2cb2d adblock: update 3.8.7
* prevent forced parallel adblock service starts
* refine service trigger

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit a9aae9095f)
2019-11-02 06:18:49 +01:00
Stan Grishin 0d146c2317 https-dns-proxy: implement dnsmasq integration
Signed-off-by: Stan Grishin <stangri@melmac.net>
2019-10-31 12:55:23 -07:00
Alexandru Ardelean 807c557cf9 django: bump to version 1.11.25
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit e9e687a1f1)
2019-10-30 23:16:57 +08:00
Alexandru Ardelean 4574e8fcb9 python-cffi: bump to version 1.13.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from dff2fe2963)
2019-10-30 05:49:55 +08:00
Luiz Angelo Daros de Luca 702c655874 ruby: update to 2.6.5
2.6.5 fixes:
* CVE-2019-16255: A code injection vulnerability of Shell#[] and Shell#test
* CVE-2019-16254: HTTP response splitting in WEBrick (Additional fix)
* CVE-2019-15845: A NUL injection vulnerability of File.fnmatch and File.fnmatch?
* CVE-2019-16201: Regular Expression Denial of Service vulnerability of WEBrick’s Digest access authentication

2.6.4 fixes:
* Multiple jQuery vulnerabilities in RDoc

Changelog: https://github.com/ruby/ruby/compare/v2_6_3...v2_6_5

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit d3d0c28149)
2019-10-27 16:09:43 -03:00
Josef Schlehofer 4a852e9df4 btrfs-progs: Update to version 5.3
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 8262696cc4)
2019-10-25 11:52:56 +02:00
Jeffery To bda873d0e0 circleci: Use 19.07 snapshot SDK
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-25 02:44:25 +02:00
Jeffery To e16eabc026 circleci: Add 19.07 GPG/usign public keys, verify keys
This also updates the user id comments for GPG keys and untrusted
comments for usign keys.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 89d6f51c98978bbdb61c6ada9d2264cf7dca854c)
2019-10-25 02:44:25 +02:00
Alexandru Ardelean f18bc652c7 django-ranged-response: update packaging format + add python3 variant
This change also updates the maintainer email to cotequeiroz@gmail.com, as
requested on a different change.

Not updating deps here, since that will be done in the next changeset that
will convert packages to the Python[3] packaging format.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 70ebc7a2f4)
2019-10-24 21:33:37 +02:00