Commit Graph

11280 Commits

Author SHA1 Message Date
Michael Heimpold ae0e27548f php7: fix dependencies for mysqlnd (fixes #11113)
When during the build the openssl extension is also selected, then
the mysqlnd extension depends on it, too.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 50b1cd3757)
2020-04-25 23:30:29 +02:00
Hannu Nyman 4df97ac0ee
Merge pull request #11926 from stangri/18.06-simple-adblock
[18.06] simple-adblock: bugfix: start downloads on cold boot/fresh install
2020-04-22 20:57:48 +03:00
Stan Grishin 7ed5c9364b simple-adblock: bugfix: start downloads on cold boot
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-04-22 17:46:23 +00:00
tripolar 96a2a5cfbc
Merge pull request #11907 from BKPepe/18.06-git
[18.06] git: update to version 2.20.4
2020-04-21 10:04:02 +02:00
Josef Schlehofer fc93a4f126
git: update to version 2.20.4
Fixes CVE-2020-11008

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-04-21 08:11:54 +02:00
Josef Schlehofer 3b55acda90
Merge pull request #11857 from BKPepe/18.06-git
[18.06] git: update to version 2.20.3
2020-04-21 07:22:14 +02:00
tripolar 48b347e47c
Merge pull request #11883 from yousong/wget1806
[18.06] acme: depends on wget-ssl
2020-04-18 19:55:52 +02:00
Yousong Zhou a62e54af3e acme: depends on wget-ssl
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit d917d662ae)
2020-04-18 23:46:09 +08:00
Yousong Zhou 7d1f138c23 wget: make the ssl variant provides wget-ssl
This is to address the need for specifying dependency on a wget
implementation with ssl support.

Now we have a game of names for opkg

 1. uclient-fetch: minimal version by openwrt project
 2. wget-nossl: gnu wget w/o ssl support
 3. wget-ssl: for the moment since this commit, gnu wget w/ ssl support
 4. wget: uclient-fetch, wget-nossl, or wget-ssl
 5. gnu-wget: wget-nossl or wget-ssl

By the time we provide some dummy package like uclient-fetch-ssl and
make it also provide wget-ssl, I guess by then we will also need
gnu-wget-ssl...

Ref: https://github.com/openwrt/packages/issues/11534
Ref: https://github.com/openwrt/packages/pull/9941
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 585e4a38fe &
resolved conflict)
2020-04-18 23:45:35 +08:00
Karel Kočí b075784431 wget: do not provide itself
The package wget should not say that it provides itself.

This also make gnu-wget provide general so it is not written in Makefile
twice.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 75f2be7d50 &
resolved conflict)
2020-04-18 23:44:20 +08:00
Luiz Angelo Daros de Luca 3066aaa825 ruby: update to 2.5.8
This release includes security fixes, specially:

* CVE-2020-10663: Unsafe Object Creation Vulnerability in JSON (Additional fix)
* CVE-2020-10933: Heap exposure vulnerability in the socket library

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2020-04-15 17:20:17 -03:00
Josef Schlehofer 4a4c793272
git: update to version 2.20.3
Fixes CVE-2020-5260

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-04-15 17:18:25 +02:00
Jo-Philipp Wich a0fe9eeab1 nlbwmon: update to latest Git HEAD
34a1887 nfnetlink: disable sequence number checking

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 53c48fae15)
2020-04-11 23:24:42 +02:00
Hannu Nyman c0fffb996f
Merge pull request #11821 from stangri/18.06-https-dns-proxy
[18.06] https-dns-proxy: bugfix: memory leak
2020-04-11 10:48:29 +03:00
Stan Grishin a0a779faf6 https-dns-proxy: bugfix: memory leak
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-04-11 00:25:39 +00:00
Jo-Philipp Wich e8cf2e60ae nlbwmon: update to latest Git HEAD
e757e06 nfnetlink: allow specifying the socket buffer size
33c77cb nfnetlink: properly handle nl_recvmsgs() failures
95cced5 protocol: Include whitespace when reading names

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit d81d777a0f)
2020-04-11 00:33:10 +02:00
DENG Qingfang 8696b34992 nlbwmon: bump to latest git
e921ca0a Add further commonly used protocols to the protocol file.

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
(cherry picked from commit 5e140462e4)
2020-04-11 00:33:10 +02:00
Richard Yu c66a3cf7ce nlbwmon: add procd reload trigger for nlbwmon config
Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit d551758310)
2020-04-11 00:33:09 +02:00
Kevin Darbyshire-Bryant 28d6dc944e nlbwmon: receive dhcp interface triggers
Not all interfaces may have been allocated address at nlbwmon startup so
it may not collect statistics as expected/configured.

Add interface triggers to catch dhcp events and restart as required.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(cherry picked from commit 662d3f16d2)
2020-04-11 00:33:09 +02:00
Marc Benoit 6a642a6073 net/nlbwmon: run with lower priority
Even on a powerful platform a nlbwmon process'
activities are sometimes affecting throoughput and
latency. This is a backgroud process, that should not
be running with default priority.
Even if it is a little deplayed, that is not a worry in
this case. The routing should be the main priority,
bandwidth stats collection can wait a bit.

Tested on Netgear R7800
Signed-off-by: Marc Benoit <marcb62185@gmail.com>
(cherry picked from commit 9b3ecbd64a)
2020-04-11 00:33:09 +02:00
Rosen Penev 21f7d16a19
Merge pull request #11803 from stangri/18.06-simple-adblock
[18.06] simple-adblock: bugfixes: remove escape chars from log, restore from cache on boot
2020-04-07 18:39:35 -07:00
Stan Grishin 6787a9bfd2 simple-adblock: bugfixes: remove escape chars from log, restore from cache on boot
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-04-07 21:55:51 +00:00
Hannu Nyman 876a7418fe nano: update to 4.9.2
Update nano editor to version 4.9.2

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit f11833d46c)
2020-04-07 18:07:20 +03:00
Josef Schlehofer 133f71a2cd
Merge pull request #11773 from BKPepe/msmtp
[18.06] msmtp: update to version 1.8.7
2020-04-06 09:45:41 +02:00
Josef Schlehofer b0484b0051
msmtp: update to version 1.8.7
- It brings oauthbearer support
- It switches from OpenSSL to GnuTLS, which is fully compatible and
  brings more parameters

Makefile changes:
- Fix SPDX License Identifier
- Add PKG_CPE_ID
- The Project does not use sourceforce anymore.
- Uses GnuTLS instead of OpenSSL, which was discouraged

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-04-06 00:57:02 +02:00
Hannu Nyman 2c4a58a38b nano: update to 4.9.1
Update nano editor to version 4.9.1

 2020.03.31 - GNU nano 4.9.1 "Sapperdeflap"
 Two bugs introduced in version 4.9 are fixed: the cursor
 getting misplaced when undoing line cuts, and filtering
 of the whole buffer to a new buffer not working.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit f5c47a2606)
2020-04-05 19:24:07 +03:00
Hannu Nyman 6effd4b7aa
Merge pull request #11756 from gladiac1337/haproxy-1.8.25-openwrt-18.06
[openwrt-18.06] haproxy: Update HAProxy to v1.8.25
2020-04-03 16:47:09 +03:00
Christian Lachner 0db9f894de haproxy: Update HAProxy to v1.8.25
- Update haproxy download URL and hash
- This fixes CVE-2020-11100 (http://git.haproxy.org/?p=haproxy-1.8.git;a=commit;h=525fbbe388ba033d638ff2a4efb83ae6526db5ab)

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2020-04-03 09:24:53 +02:00
Hannu Nyman 5610642876
Merge pull request #11700 from stangri/18.06-simple-adblock
[18.06] simple-adblock: support multiple dnsmasq instances + internal refactoring
2020-03-29 10:01:04 +03:00
Stan Grishin 2c1a3aaf5a simple-adblock: support multiple dnsmasq instances; rework communication between principal package and luci app
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-03-29 05:13:29 +00:00
Hannu Nyman e4c60e87d5 nano: update to 4.9
Update nano editor to version 4.9

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 09fd4445b3)
2020-03-26 21:39:49 +02:00
Rosen Penev 24f10e379e
Merge pull request #11626 from nxhack/18_06_icu_fix_CVE-2020-10531
[openwrt-18.06] icu: fix CVE-2020-10531
2020-03-21 18:08:46 -07:00
Hannu Nyman 9bdb25f51f
Merge pull request #11616 from stangri/18.06-https-dns-proxy
[18.06] https-dns-proxy: support for dnsmasq noresolv option
2020-03-21 09:47:15 +02:00
Hirokazu MORIKAWA c4ddc21bf6 icu: fix CVE-2020-10531
FIX CVE-2020-10531
 An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2020-03-21 09:18:49 +09:00
Stan Grishin 6b290744db https-dns-proxy: support for dnsmasq noresolv option
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-03-20 21:22:49 +00:00
Yousong Zhou f5ae75cf0b openvswitch: fix PIE build against 4.14 kernel
Reported-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Ref: https://github.com/openwrt/packages/pull/11567
(cherry picked from commit e9d6414437)
2020-03-16 15:32:11 +08:00
Michael Heimpold c05ea69d6d php7: update to 7.2.28
This fixes:
  - CVE-2020-7062
  - CVE-2020-7063

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 95c72d8aba)
2020-02-25 22:39:03 +01:00
Michael Heimpold 31e16f276f php7: update to 7.2.27
This fixes:
  - CVE-2020-7059
  - CVE-2020-7060

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 3cf0c61f2e)
2020-02-25 22:13:58 +01:00
Yousong Zhou f3df27f6f6 xl2tpd: fix building failure caused by pfc
Fixes openwrt/packages#10270

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 0412c20f1b)
2020-02-25 11:57:26 +08:00
Yousong Zhou a0f2911918 xl2tpd: bump to version 1.3.15
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Ref: https://github.com/openwrt/packages/issues/11418
(cherry picked from commit 620ba386b4)
2020-02-25 11:57:26 +08:00
Rosen Penev c95e3b71f3
icu: bump proper variable.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-02-18 18:50:21 -08:00
Rosen Penev ad7f02d0f1 icu: backport upstream ARC patch
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-02-15 23:01:20 -08:00
Hannu Nyman d1c6d1d958 nano: update to 4.8
Update nano editor to version 4.8

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 7bc96280d3)
2020-02-08 11:26:38 +02:00
Rosen Penev b2a29b7a49
Merge pull request #11252 from neheb/i22p
i2pd: fix various issues in 18.06
2020-02-06 19:08:00 -08:00
Rosen Penev ddfa4cddca
i2pd: move chmod command
Similar change to upstream.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-02-04 18:50:35 -08:00
David Yang 87a7ec7257
i2pd: Move DATADIR to /var/lib/i2pd, fix #5693
Original author: dartraiden <wowemuh@gmail.com>

Signed-off-by: David Yang <mmyangfl@gmail.com>
2020-02-04 18:44:34 -08:00
Hannu Nyman 8235cc43a3
Merge pull request #11227 from micmac1/sqlite3-18.06-2
[18.06] sqlite3: bump to 3.31.1
2020-02-03 22:41:35 +02:00
Sebastian Kemper e6884e5544 sqlite3: bump to 3.31.1
Upstreamed patch removed.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-02-03 20:19:21 +01:00
Rosen Penev a744482ef5
Merge pull request #11186 from micmac1/18.06-maria-10.1.44
[18.06] mariadb: security bump to 10.1.44
2020-01-30 16:30:19 -08:00
Sebastian Kemper 27d8c1bcc9 mariadb: security bump to 10.1.44
Addresses CVE-2020-2574. Patches refreshed.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-01-30 22:21:52 +01:00