Commit Graph

5683 Commits

Author SHA1 Message Date
Michael Heimpold 175b26d8bd u2pnpd: update to 0.5
This update fixes #11452 since LFS detection support was added upstream.
While at, update SPDX license tag to latest standard.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 2600255ecb)
2020-04-17 14:50:50 -07:00
Dirk Brenken 696d9bdf20 adblock: fix gawk incompatibility
* fix gawk incompatibility in reporting

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit c11aaead91)
2020-04-17 07:02:15 +02:00
Jo-Philipp Wich 84f6fab447 mac-telnet: fix mirror hash
Fixes: 8399121e6 ("mac-telnet: install uci as config file")
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 9de7945541)
2020-04-15 09:56:20 +02:00
Jo-Philipp Wich 2633415b27 mac-telnet: install uci as config file
Also mark it as configuration file while being at it.

Fixes: #11846
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 8399121e60)
2020-04-15 09:41:08 +02:00
Jo-Philipp Wich 4418e49a4e mac-telnet: mark uci as conffile
Fixes: 8399121e6 ("mac-telnet: install uci as config file")
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 9f231909eb)
2020-04-15 09:41:07 +02:00
Francesco G d12b473616 transmission: add init file STOP directive
Transmission should stop early on system shutdown to avoid
for example fstab unmount disks when transmission is writing.

Signed-off-by: Francesco G <gfrancesco@users.noreply.github.com>
(cherry picked from commit 4fcc44bc89)
2020-04-14 14:21:30 -07:00
Daniel Golle 54372522f6 transmission: add syscalls to seccomp filter
Syscalls observered when running on arm32. Add them to seccomp rule.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 3724ed3d68)
2020-04-14 14:20:18 -07:00
Richard Yu 10b93cd531 transmission: add service triggers and bump PKG_RELEASE
Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit c6c8ceb0b4)
2020-04-14 14:20:11 -07:00
Richard Yu 0ba4820b83 transmission: update config options
add missing 'peer_id_ttl_hours' and remove 'scrape_paused_torrents'
which is not exist in transmission wiki.

Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit 53fd02d62c)
2020-04-14 14:20:04 -07:00
Dirk Brenken e91c9b8b1c adblock: fix another reporting bug
* add a final sort step, this fixes dns reporting with
  multiple pcap files as input

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1d8d456a55)
2020-04-13 06:20:13 +02:00
Jeffery To fc2a591b53 treewide: Use default PKG_BUILD_DIR when possible
This removes lines that set PKG_BUILD_DIR when the set value is no
different from the default value.

Specifically, the line is removed if the assigned value is:

* $(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_NAME)-$(PKG_VERSION)

  The default PKG_BUILD_DIR was updated[1] to incorporate BUILD_VARIANT
  if it is set, so now this is identical to the default value.

* $(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_SOURCE_SUBDIR)

  if PKG_SOURCE_SUBDIR is set to $(PKG_NAME)-$(PKG_VERSION), making it
  the same as the previous case

* $(BUILD_DIR)/$(PKG_NAME)-$(PKG_VERSION)

  This is the same as the default PKG_BUILD_DIR when there is no
  BUILD_VARIANT.

* $(BUILD_DIR)/[name]-$(PKG_VERSION)

  where [name] is a string that is identical to PKG_NAME

[1]: https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=e545fac8d968864a965edb9e50c6f90940b0a6c9

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 53e1692ae9)
2020-04-12 19:24:15 -07:00
Rosen Penev 3c59551d85 nsd: Update to 4.2.1
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 6ba95fdac4)
2020-04-12 19:19:43 -07:00
Jo-Philipp Wich 4e3d6eca20 nlbwmon: update to latest Git HEAD
34a1887 nfnetlink: disable sequence number checking

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 53c48fae15)
2020-04-11 23:24:18 +02:00
Dirk Brenken 31412a2b4d adblock: update 4.0.4
* add 'ca-bundle' dependency
* fix a sort bug in report engine
* fix potential bugs in the f_extconf function

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit d6634b611a)
2020-04-11 21:54:51 +02:00
Stan Grishin 210b760d3e https-dns-proxy: bugfix: memory leak
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-04-11 00:25:26 +00:00
Jo-Philipp Wich 4542b5219a nlbwmon: update to latest Git HEAD
e757e06 nfnetlink: allow specifying the socket buffer size
33c77cb nfnetlink: properly handle nl_recvmsgs() failures
95cced5 protocol: Include whitespace when reading names

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit d81d777a0f)
2020-04-11 00:31:18 +02:00
DENG Qingfang 559ff1828d nlbwmon: bump to latest git
e921ca0a Add further commonly used protocols to the protocol file.

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
(cherry picked from commit 5e140462e4)
2020-04-11 00:31:18 +02:00
Richard Yu 45bb9056ae nlbwmon: add procd reload trigger for nlbwmon config
Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit d551758310)
2020-04-11 00:31:18 +02:00
Rosen Penev 6199615960 mosh: use mips16 and remove configure patch
MIPS16 is not needed here.

Removed configure patch and replaced with a configure var.

Removed autoreconf as configure is no longer being patched.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1ead64489b)
2020-04-08 01:39:06 -07:00
Rosen Penev 376d0b76fd mosh: Fix compilation with libcxx
Partial backport of upstream patch.``

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3bfbb7d1db)
2020-04-08 01:38:59 -07:00
Rosen Penev 913f95a4bd mosh: Add protobuf host build dependency
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2fcdd1fb57)
2020-04-08 01:38:50 -07:00
Jakub Tymejczyk d0bf136301 mosh: add package
Maintainer: Jakub Tymejczyk <jakub@tymejczyk.pl>
Compile tested: ramips, Xiaomi Router 3G, fc54256
Run tested: ramips, Xiaomi Router 3G, 0f54d96

Description:
Mosh is "Remote terminal application that allows roaming, supports
intermittent connectivity, and provides intelligent local echo and line
editing of user keystrokes".

Project's site: https://mosh.org

Makefile and patch taken from: https://github.com/mchwalisz/mosh-openwrt
updated by me

Signed-off-by: Jakub Tymejczyk <jakub@tymejczyk.pl>
(Makefile cleanup and size optimizations)
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 5ac5cf0b98)
2020-04-08 01:38:43 -07:00
Dirk Brenken 9e581d5785 Merge pull request #11800 from dibdot/adblock-19.07
[19.07] adblock: release 4.0.3
2020-04-08 09:36:03 +02:00
Dirk Brenken 5e69c99619 adblock: release 4.0.3
* new package dependencies: coreultis-sort and
  a download util with SSL support
* focus on speed (multicore-support) to handle quite big lists
* include more than 40 pre-configured blocklist sources in a compressed
  json file (/etc/adblock/adblock.sources.gz)
* dynamic SafeSearch support for google, bing, duckduckgo,
  yandex, youtube and pixabay (CNAME (bind) & IP (dnsmaq, unbound))
* DNS backend autodetection
* Download Utility autodetection
* Report Interface autodetection
* Easy cron wrapper to set an adblock related auto-timer for
  automatic blocklist updates
* raw domain/blocklist support (e.g. for dnscrypt support)
* re-add restrictive Jaillist support
* rework online doc
* Complete LuCI rewrite (migrated to client side JS)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-04-08 07:02:40 +02:00
Stan Grishin af1e0a533a simple-adblock: bugfixes: remove escape chars from log, restore from cache on boot
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-04-07 21:55:37 +00:00
Rosen Penev 574a5af56c Merge pull request #11772 from micmac1/19.07-apache-2443
[19.07] apache: security bump to 2.4.43
2020-04-06 14:08:34 -07:00
Josef Schlehofer ca555a0549 dnscrypt-proxy2: update to version 2.0.42
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 296a58491b)
2020-04-06 03:09:11 +02:00
Sebastian Kemper 8a4d0b206d apache: security bump to 2.4.43
This minor version bump fixes:

CVE-2020-1934
CVE-2020-1927

Upstream added cross-compile compatibility to apxs, so we can drop a sed
script. Upstream also added the OpenWrt layout, so we can drop our local
copy.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-04-05 21:08:04 +02:00
Christian Lachner 7e48c36cc9 haproxy: Update HAProxy to v2.0.14
- Update haproxy download URL and hash
- Add new patches (see https://www.haproxy.org/bugs/bugs-2.0.14.html)
- This fixes CVE-2020-11100 (http://git.haproxy.org/?p=haproxy-2.0.git;a=commit;h=b9cac598021e2b0d4ae2cfecf9825a3469328093)

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2020-04-03 09:32:58 +02:00
Stan Grishin 153892633c vpn-policy-routing: separation between auto/all proto; compatibility with mwan3; README update
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-03-31 23:05:46 +00:00
Stan Grishin 9923323db1 simple-adblock: support multiple dnsmasq instances; rework communication between principal package and luci app
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-03-29 05:13:18 +00:00
Jan Pavlinec c983b08446 tor: update to version 0.4.2.7 (security fix)
Fixes:
CVE-2020-10592

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-03-26 08:52:55 -10:00
Toke Høiland-Jørgensen 9ba7b1799c acme: Backport two bug fixes from master
This backports the following bug-fix commits from the master branch:

c6b4d7f367 ("acme: Include empty 'dns' config option by default")
983cc995a3 ("acme: Correctly handle domain state dir for ECC certificates")

Fixes #11675.

Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
2020-03-26 16:39:10 +01:00
Yousong Zhou 40c5dd0ba1 openvswitch: depend on IPV6 for intree kmods
Ref: https://github.com/openwrt/packages/issues/11665
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 88dcd09487)
2020-03-26 15:54:43 +08:00
Yousong Zhou ec0a9d4d01 openvswitch: rework skipping intree kmod build for unsupported kernels
This is a workaround to prevent the whole build from failing because of
the intree kmods are not supported yet by upstream project.

Root cause is that kernel version should not play a part when making
DEPENDS as the generated kconfig was for all targets that may have
different kernel versions.

One less than ideal effect of this change is that for an unsupported
kernel version, people can still select the intree kmod but it won't be
built.  This may contradict expectation if the warning was not noticed
by them

Resolves openwrt/packages#9274

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit a6ec885522)
2020-03-26 15:54:13 +08:00
Sven Roederer f7308a55fa strongswan: add conffiles for swanctl util
Add a conffiles-section for the /etc/swanctl folder, which is used by the  swanctl util. This will keep the configfiles during an sysupgrade.

Signed-off-by: Sven Roederer <S.Roederer@colvistec.de>
(cherry picked from commit 49f298eb74)
2020-03-25 19:26:11 +02:00
Eneas U de Queiroz ba76d4274e strongswan: quote 'comment' parameter in Config.in
Newer versions of the kconfig generator require quotes.  Prepare the
package for an eventual update.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 404c113bc2)
2020-03-25 19:26:11 +02:00
Karl Palsson 1cd3f5fdc2 net/pagekitec: support status reporting json file
Allows luci webapp to report health more dynamically.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>
2020-03-24 13:18:47 +00:00
Karl Palsson 1688807f18 net/pagekitec: Update to newest version
Drops a patch, adds support for a status file for health tracking.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>
2020-03-24 13:18:28 +00:00
Stan Grishin 6abb6bb2a0 https-dns-proxy: support for dnsmasq noresolv option
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-03-20 21:22:39 +00:00
Yousong Zhou f043afe468 openvswitch: fix PIE build against 4.14 kernel
Reported-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Ref: https://github.com/openwrt/packages/pull/11567
(cherry picked from commit e9d6414437)
2020-03-16 15:30:22 +08:00
Rosen Penev 5746e4a2b3 nfs-kernel-server: Fix compile with uClibc-ng
NS_MAXMSG is not defined.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 732b1c4c0e)
2020-03-14 17:36:20 -07:00
Martin Schiller 17924b1283 xtables-addons: disable ASLR PIE
This package uses ld for linking and therefor does not support the
-specs option.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>
(cherry picked from commit 3804006e60)
2020-03-14 02:51:44 +01:00
Rosen Penev dc524aa2aa softethervpn: disable PIC
Compilation is broken on AArch64.

Reordered some things for consistency between packages.

Fixed license information.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b8b4e7e269)
2020-03-09 13:57:45 -07:00
Rosen Penev 381153d597 softethervpn: Fix openssl header patch
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 41fe5a8335)
2020-03-09 13:57:32 -07:00
Rosen Penev aba0dd8729 softethervpn: Add missing OpenSSL header
Fixes compilation without OpenSSL deprecated APIs as well as
-Werror=implicit-function-declaration.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b80b614f8f)
2020-03-09 13:57:12 -07:00
Philipp Schuster f09028fcdb softethervpn: Update to rtm version 4.29-9680
Update SoftEther VPN to the latest rtm version 4.29-9680

Compile tested: Atheros AR7xxx/AR9xxx, TP-LINK Archer C7 v2, 18.06.4

Signed-off-by: Philipp Schuster <philippschuster@gmx.com>
(rebased and refreshed patches).
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 34db38520b)
2020-03-09 13:56:40 -07:00
Rosen Penev b546ff127c stubby: fix init script
The configuration file was not being generated.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b95699c647)
2020-03-09 13:55:24 -07:00
Rosen Penev c5219c8af3 stubby: makefile and init script cleanup
Reordered Makefile according to
https://github.com/openwrt/packages/pull/9399#issuecomment-508727872 .

Added PKG_BUILD_PARALLEL for faster compilation.

Remove duplicated conffiles section.

Install /etc/config/stubby using INSTALL_CONF, as is done elsewhere

Run init script through shellcheck and clean it up.

Added chmod for the stubby config file, to fix a LuCI issue.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit eaf5225323)
2020-03-09 13:55:23 -07:00
W. van den Akker 62d9ba9a02 Shorewall6: Bump to 5.2.3.7.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-03-07 10:40:39 +01:00