Commit Graph
5681 Commits
Author SHA1 Message Date
David Yang f9cf4e1f2c i2pd: Update to 2.28.0
Signed-off-by: David Yang <mmyangfl@gmail.com>
2019-09-22 13:42:04 +08:00
Rosen Penev 78248fb2fd miniupnpc: Update to 2.1.20190824
Switched to CMAKE_INSTALL to get rid of InstallDev.

Added PKG_BUILD_PARALLEL for faster compilation.

Fixed license information.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-09-21 15:57:41 -07:00
Rosen Penev 61b5f5b16c cshark: Switch to standard PKG_SOURCE_VERSION/DATE
Several other cleanups.

Added PKG_BUILD_PARALLEL for faster compilation.

Removed PKG_INSTALL as cmake.mk already defines it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-09-21 15:56:58 -07:00
Diana Dragusin bda3b710ba phantap: update to latest commit
7cc6017 phantap-learn: Add another way to detect the victim
8a4b30b phantap-learn: Continue listening for DNS traffic after initial detection
3e1cf09 Improve setup documentation
ddde4b9 Fix neighbour spelling
bee7e92 Readme.md: Update
efb57f6 Readme.md: Update

Signed-off-by: Diana Dragusin <diana.dragusin@nccgroup.com>
2019-09-21 14:53:32 -07:00
Rosen PenevandGitHub a0516d7e1d Merge pull request #10027 from James-TR/fix/pdns-lua-dep
pdns: Explicitly define lua implementation
2019-09-18 11:52:08 -07:00
Jan Pavlinecandtripolar b42159dea3 irssi: update to version 1.2.2 (security fix)
Fixes CVE-2019-15717

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-09-18 20:12:17 +02:00
James Taylor 001e30e387 pdns: Explicitly define lua implementation
Compile Tested: yes, selects lua as implementation and doesn't pick up luajit
Run Tested: no, minor change

Maintainer: me

Description:
On some architectures PowerDNS was preferring Luajit over Lua, which wasn't added
as a dependency. On previous versions this was controlled by passing `--with-lua`
and `--without-luajit` however this isn't functional anymore.

On the 4.2 series, it is instead possible to define the lua implementation to be
used by passing `--with-lua=[implementation]` ie `--with-lua=lua`

Signed-off-by: James Taylor <james@jtaylor.id.au>
2019-09-19 00:11:04 +10:00
Jan Pavlinec 299e5b0a9b treewide: add PKG_CPE_ID for better cvescanner coverage
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-09-17 12:40:26 +02:00
Florian EckertandGitHub ffe358b918 Merge pull request #10015 from mwarning/zt
zerotier: update to 1.4.6
2019-09-17 08:35:10 +02:00
Rosen Penev 0fa6b85686 ulogd: Add back autoreconf
Compile fails at times, probably because of the patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-09-16 17:49:17 -07:00
Moritz Warning 6181852408 zerotier: update to 1.4.6
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2019-09-17 01:37:24 +02:00
Rosen PenevandGitHub b505803714 Merge pull request #9995 from flyn-org/scapy
scapy: update to 2.4.3
2019-09-16 09:46:59 -07:00
Dirk Brenken 496d527080 adblock: update 3.8.6
* refine stop logic to prevent needless dns backend restarts
  and other oddities
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
2019-09-16 10:49:37 +02:00
Yousong Zhou feacaa5f80 openvswitch: bump to version 2.12.0
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2019-09-16 07:59:31 +00:00
Stijn Tintel 6bcfacca5e strongswan: bump to 5.8.1
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2019-09-16 02:28:20 +03:00
W. Michael Petullo aa96854564 scapy: fix PKG_LICENSE_FILES
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2019-09-15 13:36:52 -04:00
Rosen PenevandGitHub 744fc97820 Merge pull request #9584 from ynezz/upstream/move-scons
scons: move host build tool to a proper place
2019-09-15 07:21:52 -07:00
W. Michael Petullo 3c9ce19f92 scapy: update to 2.4.3
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2019-09-14 12:11:19 -04:00
Toke Høiland-Jørgensen 1126368e0e sqm-scripts: Bump to v1.4.0
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2019-09-14 13:19:23 +02:00
Hannu NymanandGitHub 05c939c643 Merge pull request #9986 from neheb/nut
nut: Switch to pkgconfig for finding libgd
2019-09-14 10:39:16 +03:00
Rosen Penev 81e6bb77cf nut: Switch to pkgconfig for finding libgd
nut uses gdlib-config to find libgd, which happens to be deprecated. This
switches it to use pkgconfig and allows a fallback to gdlib-config, same
as the libusb check.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-09-13 12:56:43 -07:00
Ted Hess 2d49aab04c dnscrypt-proxy: Update to latest git version.
Revise dnscrypt-resolvers.csv with new dnscrypt-ca info.

Signed-off-by: Ted Hess <thess@kitschensync.net>
2019-09-13 14:46:44 -04:00
Rosen PenevandGitHub 58e8fe2fee Merge pull request #9983 from James-TR/pdns-4.2.0-bump
pdns: bump version to 4.2.0
2019-09-13 10:59:03 -07:00
James Taylor d7fb1e3fca pdns: bump version to 4.2.0
Bump PowerDNS Authoritative DNS Server to 4.2.0. Release changelong can be found at
https://doc.powerdns.com/authoritative/changelog/4.2.html#change-4.2.0

Compile Tested: OpenWRT Snapshot - armv7
Run Tested: Linksys WRT1900ACS - package runs correctly, not all functionality has been tested.

Signed-off-by: James Taylor <james@jtaylor.id.au>
2019-09-13 23:14:55 +10:00
Jo-Philipp WichandJohn Crispin a8b4a28372 cgi-io: use splice() to stream backup archive
This improves the I/O performance when outputting large backups.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-09-13 13:05:09 +02:00
Jo-Philipp WichandJohn Crispin 8c22db6531 cgi-io: pass appropriate HTTP error codes to failure()
Instead of always replying with a generic 500 internal server error code,
use more appropriate codes such as 403 to indicate denied permissions.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-09-13 13:05:09 +02:00
Jo-Philipp WichandJohn Crispin ab2a2b080d cgi-io: add download operation
Add a new `cgi-download` applet which allows to retrieve the contents
of regular files or block devices.

In order to initiate a transfer, a POST request in x-www-form-urlencoded
format must be sent to the applet, with one field "sessionid" holding
the login session and another field "path" containing the file path to
download.

Further optional fields are "filename" which - if present - will cause
the download applet to set a Content-Dispostition header and "mimetype"
which allows to let the applet respond with a specific type instead of
the default "application/octet-stream".

Below is an example for the required acl rules to grant download access
to files or block devices:

    ubus call session grant '{
        "ubus_rpc_session": "...",
        "scope": "cgi-io",
        "objects": [
            [ "download", "read" ]
        ]
    }'

    ubus call session grant '{
        "ubus_rpc_session": "...",
        "scope": "file",
        "objects": [
            [ "/etc/config/*", "read" ],
            [ "/dev/mtdblock*", "read" ]
        ]
    }'

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-09-13 13:05:09 +02:00
Jo-Philipp WichandJohn Crispin c8a86c8c8e cgi-io: use different acl scopes for path and command permissions
Use the `cgi-io` scope to check for permission to execute the requested
command (`upload`, `backup`) and the `file` scope to check path
permissions.

The reasoning of this change is that `cgi-io` is usually used in
conjunction with `rpcd-mod-file` to transfer large file data out
of band and `rpcd-mod-file` already uses the `file` scope to manage
file path access permissions. After this change, both `rpc-mod-file`
and `cgi-io` can share the same path acl rules.

Write access to a path can be granted by using an ubus call in the
following form:

    ubus call session grant '{
        "ubus_rpc_session": "...",
        "scope": "file",
        "objects": [
            [ "/var/lib/uploads/*", "write" ]
        ]
    }'

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-09-13 13:05:09 +02:00
Alexandru Ardelean dc08f0fab8 seafile-seahub: update dependency to python-mysqlclient
The `python-mysql` package was updated with PR https://github.com/openwrt/packages/pull/9705

For seahub this was omitted, since the Python dependencies are prefixed
with `python-`, so it was missed during the grep search.
And grepping just for `mysql` yields many results.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-09-13 12:27:23 +03:00
Petr Štetiar c3bacb6631 iotivity,smartsnmpd,gpsd: use scons from feed
commit 0c090fde68b2 ("scons: move host build tool to a proper place")
has moved scons into the packages feeds, so switch to that package
include and adjust build dependency to a new scons home.

Signed-off-by: Petr Štetiar <ynezz@true.cz>
2019-09-13 07:14:08 +02:00
Paul TobiasandRosen Penev 21f5cdd2fa ddns-scripts: Use https for domains.google.com
Without https the update fails with:

```
 132954       : #> /usr/bin/curl -RsS -o /var/run/ddns/myddns_ipv4.dat --stderr /var/run/ddns/myddns_ipv4.err --noproxy '*' 'http://CENSORED:***PW***@domains.google.com/nic/update?hostname=CENSORED&myip=CENSORED'
 132954       : DDNS Provider answered:
<HTML>
<HEAD>
<TITLE>Moved Temporarily</TITLE>
</HEAD>
<BODY BGCOLOR="#FFFFFF" TEXT="#000000">
<H1>Moved Temporarily</H1>
The document has moved <A HREF="https://domains.google.com/nic/update?hostname=CENSORED&amp;myip=CENSORED">here</A>.
</BODY>
</HTML>
 132954 ERROR : IP update not accepted by DDNS Provider
```

Signed-off-by: Paul Tobias <tobias.pal@gmail.com>
2019-09-12 15:26:07 -07:00
Rosen Penev eadd5abe40 smartsnmpd: Update to 2015-02-22 version
Ran through 2to3 to get it to compile.

Ran init script through shellcheck. Grouped several file writes.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-09-12 15:11:49 -07:00
Rosen PenevandGitHub 73a81c586d Merge pull request #9937 from mwarning/zerotier
zerotier: license change and make sure path exists
2019-09-12 14:20:04 -07:00
William Fleurant 1147695a9f yggdrasil: fix #9960 re: vendor fix
Signed-off-by: William Fleurant <meshnet@protonmail.com>
2019-09-12 14:28:02 -04:00
Rosen PenevandGitHub 61ccd29d37 Merge pull request #9705 from commodo/python-mysqlclient
python-mysql[client]: rename to python-mysqlclient & bump to version 1.4.4
2019-09-12 08:53:27 -07:00
Rosen PenevandGitHub 408ccf7946 Merge pull request #9952 from neheb/rt
rtorrent: Switch to static linking
2019-09-11 22:48:40 -07:00
Dirk Brenken 04bd683af8 banip: update 0.2.1
* fix for #9954

Signed-off-by: Dirk Brenken <dev@brenken.org>
2019-09-10 19:34:49 +02:00
Sven Eckelmann bbb1ea7345 treewide: Change .*GPL.*+ licenses to SPDX compatible identifier
The CONTRIBUTING.md requests an (or multiple) SPDX identifier for GPL
licenses. But a lot of packages did use a different, non-SPDX style with a
"+" at the end instead of "-or-later".

Signed-off-by: Sven Eckelmann <sven@narfation.org>
2019-09-10 07:45:15 +02:00
Rosen PenevandGitHub 331201deae Merge pull request #9947 from eglooca/master
netifyd: Updated to v2.92.
2019-09-09 22:20:05 -07:00
Rosen Penev 358495f118 rtorrent: Switch to using static libtorrent
rtorrent is the only user of libtorrent. Statically link to save space.

Added usleep patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-09-09 15:32:29 -07:00
Dirk BrenkenandGitHub 9b18f3ac82 Merge pull request #9948 from dibdot/banIP
banip: update 0.2.0
2019-09-09 21:25:25 +02:00
Dirk Brenken 5f49601e63 banip: update 0.2.0
* remove 'http-only' mode, all sources are now fetched from https sites
* the backup mode is now mandatory ('/tmp' is the default backup
  directory), always create and re-use backups if available.
  To force a re-download take the 'reload' action.
* support 'sshd' in addition to 'dropbear' for logfile parsing
  to detect break-in events
* always update the black-/whitelist with logfile parsing results
  in 'refresh' mode (no new downloads)
* rework the return code handling
* tweak procd trigger
* various small fixes
* (s)hellsheck cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
2019-09-09 21:11:10 +02:00
Darryl Sokoloski 898de0336f netifyd: Updated to v2.92.
Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>
2019-09-09 10:22:32 -04:00
Yousong Zhouandtripolar 20efa32d2d acme: depends on gnu-wget
Fixes openwrt/packages#9456

Ref: https://github.com/openwrt/packages/issues/9456
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2019-09-09 09:40:34 +02:00
Yousong Zhouandtripolar 99aed64005 wget: provides gnu-wget
So that packages like acme requiring features from it can depend on it
explicitly, not the more basic "wget" which is also provided by
"uclient-fetch"

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2019-09-09 09:40:34 +02:00
Moritz Warning 43cca9cddc zerotier: make sure the /var/lib exists
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2019-09-09 01:28:32 +02:00
Moritz Warning 2da998768b zerotier: change license to BSL 1.1
Business Source License.

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2019-09-09 01:28:07 +02:00
Rosen Penev 41fe5a8335 softethervpn: Fix openssl header patch
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-09-06 19:51:59 -07:00
Dirk BrenkenandGitHub 35838f4271 Merge pull request #9929 from dibdot/adblock
adblock: update 3.8.5
2019-09-06 20:53:58 +02:00
Rosen PenevandGitHub f11cd7e578 Merge pull request #9931 from sebastian-de/ipfix
ulogd2: Build IPFIX module
2019-09-06 11:19:46 -07:00