Rosen Penev
ef940752d2
glib2: Disable Werror
...
On GCC9, it throws a Wformat-nonliteral error. Unfortunately, there's no
easy was to fix it as it is fortify-headers where the warning ultimately
comes from.
Signed-off-by: Rosen Penev <rosenp@gmail.com >
(cherry-picked from abdec8939e )
2020-01-27 15:45:32 -08:00
Hannu Nyman
1e43dc8f81
Merge pull request #11123 from stangri/19.07-https-dns-proxy
...
[19.07] https-dns-proxy: fix deleting server items, configurable dnsmasq settings change
2020-01-26 22:39:33 +02:00
Rosen Penev
045e54e6b6
Merge pull request #11129 from Robby-/openwrt-19.07-freeradius3_update_3_0_20
...
[19.07] freeradius3: Update to 3.0.20
2020-01-26 10:48:13 -08:00
Jiri Slachta
885c9ed6cb
Merge pull request #11126 from micmac1/19.07-tiff
...
[19.07] tiff: update version to 4.1.0
2020-01-26 18:27:49 +01:00
Robby K
b3c1a67ff1
freeradius3: Update to 3.0.20
...
Latest stable release, contains security fixes for EAP-PWD (side-channel leak), logrotate settings (CVE-2019-10143) and a DoS issue due to multithreaded BN_CTX access (CVE-2019-17185).
Also refreshed patches/002-disable-session-cache-CVE-2017-9148.patch due to the following changes/commits in freeradius:
https://github.com/FreeRADIUS/freeradius-server/commit/bf1a1eda2387745bbe538998f3d2e6514f981bfd
https://github.com/FreeRADIUS/freeradius-server/commit/a3c46544b38ab46218c385d0ee197538fad5b3da
Signed-off-by: Robby K <robbyke@gmail.com >
2020-01-26 14:43:06 +01:00
Jiri Slachta
eee4d0830d
tiff: update version to 4.1.0
...
Signed-off-by: Jiri Slachta <jiri@slachta.eu >
2020-01-26 09:11:27 +01:00
Stan Grishin
a9fd019a3d
https-dns-proxy: fix deleting server items, configurable dnsmasq settings change
...
Signed-off-by: Stan Grishin <stangri@melmac.net >
2020-01-25 21:14:56 -07:00
Rosen Penev
eab36f8a67
avrdude: Fix GPIO path building
...
%ud is a GNU extension. It's not really supported elsewhere.
Signed-off-by: Rosen Penev <rosenp@gmail.com >
(cherry-picked from 536c6b8be7 )
2020-01-23 21:33:46 -08:00
Rosen Penev
9cb0c7f4a0
Merge pull request #10990 from BKPepe/django-19.07
...
[OpenWrt 19.07] django: update to version 1.11.27
2020-01-22 18:41:20 -08:00
Rosen Penev
5afe3fd1df
Merge pull request #11078 from ddast/radicale_add_urllib_dep
...
radicale-py3: Add python3-urllib dependency
2020-01-20 14:55:29 -08:00
Dennis Dast
ea93089afd
radicale-py3: Add python3-urllib dependency
...
Depend on python3-urllib instead of python3-email (python3-urllib has
python3-email as a dependency).
Signed-off-by: Dennis Dast <mail@ddast.de >
2020-01-20 20:59:41 +01:00
Matt Merhar
72af40f2ba
nut: fix other/otherflag custom variables in nut-server.init
...
This allows custom config parameters to be added to the generated config
files, enabling the original intended functionality per
https://openwrt.org/docs/guide-user/services/ups/software.nut .
Example usage from /etc/config/nut_server:
config driver 'apc'
option driver 'snmp-ups'
option snmp_version 'v3'
option port '172.16.100.5'
list other 'secLevel'
list other 'secName'
list other 'authPassword'
list otherflag 'notransferoids'
config other 'other_secLevel'
option value 'authNoPriv'
config other 'other_secName'
option value 'some_username'
config other 'other_authPassword'
option value 'some_password'
config other 'otherflag_notransferoids'
option value '1'
Signed-off-by: Matt Merhar <mattmerhar@protonmail.com >
(cherry-picked from 0b04dd34a0 )
2020-01-19 21:22:35 -08:00
Sebastian Kemper
e1aa905ab9
nut: update OpenSSL 1.1.0 patch
...
Replaces OpenWrt patch with upstream patch. Also removes
0002-Fix-check-for-empty-string.patch as this is included in upstream
OpenSSL 1.1.0 patch.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net >
(cherry-picked from 7d4f1b8589 )
2020-01-19 21:22:32 -08:00
Sebastian Kemper
154da8aa02
nut: fix CGI setup
...
This commit makes
- the libgd dependency (as well as specifying libs and includes)
- the configure argument "--with-cgi"
dependant on whether the package nut-web-cgi is selected.
nut-web-cgi is also added to PKG_CONFIG_DEPENDS.
Resolves : #10641
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net >
(cherry-picked from cdd660a41d )
2020-01-19 21:21:51 -08:00
Hannu Nyman
7b07ac9e3d
Merge pull request #11063 from EricLuehrsen/openwrt-19.07-unbound
...
[openwrt-19.07] unbound: improve dependencies for okpg
2020-01-19 22:49:31 +02:00
Eric Luehrsen
bc4f3c11cb
unbound: improve dependencies for okpg
...
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com >
cherry pick 6505154a74
2020-01-19 15:35:09 -05:00
Rosen Penev
895200940a
Merge pull request #11061 from cotequeiroz/afalg_1.1.0-19.07
...
[19.07] afalg_engine: bump to v1.1.0
2020-01-19 12:17:06 -08:00
Eneas U de Queiroz
1410d6b737
afalg_engine: bump to v1.1.0
...
This version is up to 20% faster than 1.0.1.
Build without cryptouser information, which is not available in 19.07.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com >
2020-01-19 16:16:25 -03:00
Josef Schlehofer
162974f809
btrfs-progs: update to version 5.4.1
...
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
(cherry picked from commit c864563372 )
2020-01-19 11:55:42 +01:00
Josef Schlehofer
072fcb5ce4
libseccomp: add seccomp-syscalls.h to InstallDev
...
In the version 2.4.2, there was introduced a new header file.
Ship it to InstallDev
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2020-01-19 11:37:57 +01:00
Hannu Nyman
3ab34b50db
Merge pull request #11051 from wvdakker/openwrt-19.07
...
[Openwrt 19.07] Shorewall: Bump to 5.2.3.5
2020-01-19 00:08:39 +02:00
W. van den Akker
5022caf869
Shorewall6-lite: Bump to 5.2.3.5
...
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl >
2020-01-18 22:49:47 +01:00
W. van den Akker
0b890cf4b5
Shorewall6: Bump to 5.2.3.5
...
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl >
2020-01-18 22:49:28 +01:00
W. van den Akker
1201cdcd5f
Shorewall: Bump to 5.2.3.5
...
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl >
2020-01-18 22:49:07 +01:00
W. van den Akker
4cb0ff8314
Shorewall-lite: Bump to 5.2.3.5
...
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl >
2020-01-18 22:48:35 +01:00
W. van den Akker
c2a5aa1a54
Shorewall-core: Bump to 5.2.3.5
...
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl >
2020-01-18 22:48:13 +01:00
Eneas U de Queiroz
8ba3c7b19d
afalg_engine: fix ENGINES location, zero-copy
...
Use a fixed ENGINES_DIR location, instead of trying to read it from the
openssl Makefile.
It also fixes the zero-copy config option not being passed down to the
cmake options.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com >
(cherry-picked from 6a5f7920e9 )
2020-01-17 15:37:26 -08:00
Eneas U de Queiroz
776216a652
afalg_engine: add new package
...
This is an alternate AF_ALG engine for openssl, based on the devcrypto
engine, but using the AF_ALG interface instead of /dev/crypto.
It is different than the AF_ALG engine that ships with OpenSSL:
- it uses sync calls, instead of async
- it suports more algorithms
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com >
(cherry picked from commit 0e0bd6da4b )
2020-01-17 09:40:32 -03:00
Stijn Tintel
995226d95d
strongswan: bump to 5.8.2
...
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be >
2020-01-17 01:07:37 +02:00
Paul Fertser
243673b2d0
strongswan: allow to specify per-connection reqid with UCI
...
This is useful to assign all traffic to a fw3 zone, e.g.:
/etc/config/ipsec:
config remote 'test'
list tunnel 'dev'
...
config 'tunnel' 'dev'
option reqid '33'
...
/etc/config/firewall:
config zone
option name wan
option extra_src "-m policy --pol none --dir in"
option extra_dest "-m policy --pol none --dir out"
...
config zone
option name vpn
# subnet needed for firewall3 before 22 Nov 2019, 8174814a
list subnet '0.0.0.0/0'
option extra_src "-m policy --pol ipsec --dir in --reqid 33"
option extra_dest "-m policy --pol ipsec --dir out --reqid 33"
...
Signed-off-by: Paul Fertser <fercerpav@gmail.com >
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be >
2020-01-17 01:07:32 +02:00
Stijn Tintel
3880d65a07
strongswan: bump to 5.8.1
...
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be >
2020-01-17 01:07:28 +02:00
Jan Pavlinec
ba43556aed
libarchive: update to version 3.4.1 (security fix)
...
Fixes CVE-2019-19221
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz >
(cherry-picked from df634dcc92 )
2020-01-16 14:35:18 -08:00
Eneas U de Queiroz
ff87e8dbfa
oniguruma: bump to version 6.9.4
...
This version adds a new RegSet API, and fixes the following:
- CVE-2019-19012
- CVE-2019-19203
- CVE-2019-19204
- CVE-2019-19246
- some problems (found by libFuzzer test)
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com >
(cherry-picked from 94895ec818 )
2020-01-16 14:34:14 -08:00
Stan Grishin
3030d0fc1a
vpn-policy-routing: bugfix: remove conflict with vpnbypass
...
Signed-off-by: Stan Grishin <stangri@melmac.net >
(cherry picked from commit 05603822d3 )
2020-01-16 20:00:31 +02:00
Rosen Penev
d0bdd32524
Merge pull request #11021 from jefferyto/golang-updates-openwrt-19.07
...
[openwrt-19.07] golang: Updates
2020-01-14 12:11:06 -08:00
Jeffery To
2dbc88762c
golang: Update to 1.13.6
...
Signed-off-by: Jeffery To <jeffery.to@gmail.com >
2020-01-15 01:26:40 +08:00
Jeffery To
fdd202bd1e
golang: Fix selection of GOARM value
...
This fixes how GOARM is selected for arm platforms, based on support for
VFP/VFPv3 rather than CPU version.
Fixes #10967 .
Signed-off-by: Jeffery To <jeffery.to@gmail.com >
2020-01-15 00:58:28 +08:00
Josef Schlehofer
6a64b7affe
libseccomp: update to version 2.4.2
...
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2020-01-13 22:58:48 +01:00
Josef Schlehofer
a50eeb01fc
django: update to version 1.11.27
...
Fixes: CVE-2019-19844
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2020-01-11 23:15:13 +01:00
Eric Luehrsen
8f3dcbcee6
unbound: fix TLS forwards with optional suffix
...
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com >
(cherry picked from commit b101dd76fb )
2020-01-11 23:03:47 +02:00
Jan Pavlinec
ffdbf4e7c3
measurement-kit: update to version 0.10.8
...
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz >
(cherry picked from commit 744e2dd19d )
2020-01-11 09:20:17 +01:00
Jan Pavlinec
8f037084bc
measurement-kit: update package
...
Changes:
-add InstallDev section
-remove uclibc patch (issue fixed in upstream)
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz >
(cherry picked from commit df853b2d20 )
2020-01-11 09:20:08 +01:00
Jan Pavlinec
8f2eb8f2da
measurement-kit: update to version 0.10.6
...
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz >
(cherry picked from commit 2949906ec4 )
2020-01-11 09:20:02 +01:00
Rosen Penev
3dfabe79f3
smbd: Update to 3.0.2
...
Fixes a nasty stack corruption issue and a big endian fix.
Signed-off-by: Rosen Penev <rosenp@gmail.com >
(cherry-picked from 232a271f40 )
2020-01-10 19:05:10 -08:00
Rosen Penev
670f336d79
transmission: Sync with master
...
Signed-off-by: Rosen Penev <rosenp@gmail.com >
2020-01-10 18:07:42 -08:00
Alexandru Ardelean
e847333d15
python,python3: split python[3]-pkg-resources from setuptools
...
This package is required by other packages to run some binaries via
`load_entry_point`.
So, this splits this package away from setuptools.
setuptools is pretty big, akd pkg-resources is also big, but not as big.
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com >
(cherry picked from commit ed0e77f3c3 )
Reference to discussion at
https://github.com/openwrt/packages/commit/c61579b564a3877235d74684b1a75915d77e42a9#commitcomment-36665837
Adjusted python PKG_RELEASE items to current situation
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi >
2020-01-10 18:57:16 +02:00
Yousong Zhou
1f293771cd
openvswitch: bump PKG_RELEASE
...
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com >
2020-01-08 13:03:25 +08:00
Yousong Zhou
dc097661c5
openvswitch: backport patch to fix compilation
...
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com >
2020-01-08 12:59:37 +08:00
Yousong Zhou
74e160df22
openvswitch: fix building failure caused by dst_ops api change
...
Ref: https://github.com/openwrt/packages/issues/10961
Reported-by: Sven Roederer <devel-sven@geroedel.de >
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com >
2020-01-08 12:56:32 +08:00
Yousong Zhou
a4a54d0f3b
openvswitch: bump to version 2.11.1
...
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com >
2020-01-08 11:57:17 +08:00