Commit Graph

17302 Commits

Author SHA1 Message Date
Sergio E. Nemirowski 199860fa3a
prosody: /etc/prosody permissions fix
Signed-off-by: Sergio E. Nemirowski <sergio@outerface.net>
(cherry picked from commit 838306cb37)
2022-01-31 00:06:56 +01:00
Rosen Penev 498bcd4e25
prosody: Update to 0.11.3
Several Makefile rearrangements for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 73d29b9fd7)
2022-01-31 00:06:51 +01:00
Josef Schlehofer 057803706e
tvheadend: fix conffiles section
The previous one was wrong, and it did not work. It could be checked
inside compiled package in control.tar.gz that there was missing
``conffiles`` file with content `/etc/config/tvheadend`

It is also possible to verify that the config is not overwritten on the router
by running ``opkg install tvheadend --force-reinstall``

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 752d1ffc28)
2022-01-25 09:03:07 +01:00
Josef Schlehofer 765307772f domoticz: backport patch to fix compilation with uClibc-ng
This helps to compile domoticz on arc target.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-01-18 18:07:49 -08:00
Stijn Tintel 572392a8ac domoticz: bump to 4.10717
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 7e50722145)
2022-01-18 18:07:49 -08:00
Rosen Penev 8d91ba86a9 domoticz: Fix compilation without deprecated OpenSSL APIs
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8c77bcc19f)
2022-01-18 18:07:49 -08:00
James White 7bb0a7e929
netdata: Update init script to use -D rather than -nd
The current init script is using the deprecated -nd flag. This updates netdata to be started with -D.

Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit cf9d5a8870)
2022-01-13 10:39:36 +01:00
Sebastian Kemper 6317eabad7
apache: security bump to 2.4.51
Fixes (see [1] for details):

  CVE-2021-33193
  CVE-2021-41524
  CVE-2021-41773
  CVE-2021-42013

[1] https://httpd.apache.org/security/vulnerabilities_24.html

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit da4b1ca8d6)
2022-01-13 10:11:55 +01:00
Hannu Nyman 4af8afe6cc haveged: update to 1.9.17
Update havged to version 1.9.17.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit e065ccda94)
(Autorelease removed)
2022-01-09 19:03:57 +02:00
Josef Schlehofer 0e3869c2ad
Merge pull request #17476 from BKPepe/buildonly
treewide: add missing BUILDONLY
2022-01-03 19:58:33 +01:00
Rosen Penev f299c29a45
treewide: add missing BUILDONLY
Fixes Makefile warnings:

WARNING: skipping X -- package has no install section

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 5a7148d112)
2022-01-02 10:02:23 +01:00
Karel Kočí 64d0238a1b
zsh: drop bash syntax in postinst
Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry picked from commit c09d6042fe)
2021-12-17 23:48:23 +01:00
Karel Kočí ea3e54accd
zsh: fix invalid postrm script and little refactor of scripts
The postrm script was missing shebang. Postrm scripts are packaged and
executed directly and not sourced by default script (as in case of prerm
and postinst).

Also move some indents around to not confuse reader. The section in
postinst was indented to same level as grep "condition" but is on same
level as initial grep (not part of that "condition").

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry picked from commit d2d193d818)
2021-12-17 23:48:16 +01:00
Hannu Nyman 5a9b5ee78c nano: update to version 6.0
Update nano editor to version 6.0

Version 6.0 enable toggling the display of the line numbers with
the shortcut key M-N (Alt-n). Also the cmdline option "-l" works.
Remove earlier patch regarding that.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

(backported from commits 0571f5400, 9023845d5 and ae7f62d63)
2021-12-16 20:35:01 +02:00
Petr Štetiar 7db6f87334
Merge pull request #17250 from ynezz/ynezz/cares-fix-CVE-2021-3672
[19.07] libs/c-ares: fix domain hijacking CVE-2021-3672
2021-12-12 12:11:24 +01:00
Daniel Golle a135aedaf1
Merge pull request #17267 from BKPepe/postgresql-update
[19.07] postgresql: security update to version 11.14
2021-12-12 11:06:51 +00:00
Josef Schlehofer e1a2d908c3
msmtp: update to version 1.8.1.9
Changelog:
https://marlam.de/msmtp/news/msmtp-1-8-19/

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 173faad334)
2021-12-04 09:19:56 +01:00
Josef Schlehofer 535f4804b6
postgresql: security update to version 11.14
Patch 001-configure_fixes does not apply anymore.
Other patches were refreshed.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-12-04 01:04:48 +01:00
Petr Štetiar e93fc5a20f libs/c-ares: fix domain hijacking CVE-2021-3672
Missing input validation of host names returned by Domain Name Servers
in the c-ares library can lead to output of wrong hostnames (leading to
Domain Hijacking).

I've just taken patch from the advisory[1] and rebased it onto 1.15.0
version.

1. 809d5e8..44c009b.patch

Fixes: CVE-2021-3672
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2021-12-02 13:54:42 +01:00
Josef Schlehofer 45218f2059
msmtp: update to version 1.8.17
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 18261fcd31)
2021-12-01 00:26:04 +01:00
Josef Schlehofer d216572bb1
syslog-ng: update to version 3.35.1
Also bump the version in syslog-ng config file.
Removes this warning:

Nov 16 14:19:41 turris syslog-ng[15159]: WARNING: Configuration file format is too old, syslog-ng is running in compatibility mode. Please update it to use the syslog-ng 3.35 format at your time of convenience. To upgrade the configuration, please review the warnings about incompatible changes printed by syslog-ng, and once completed change the @version header at the top of the configuration file; config-version='3.33'

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 2d2fd36e28)
2021-11-30 23:59:49 +01:00
Florian Eckert 5c88f28c94
Merge pull request #17209 from peci1/patch-1
ddns-scripts: Fix wrong whitespace in preinst and postinst scripts
2021-11-30 12:40:50 +01:00
Hirokazu MORIKAWA 1d5b64958b icu: Fix memory bug w/ baseName
CVE-2021-30535 : Double free in ICU
https://nvd.nist.gov/vuln/detail/CVE-2021-30535
https://security-tracker.debian.org/tracker/CVE-2021-30535

ICU-21587 : Fix memory bug w/ baseName
https://github.com/unicode-org/icu/pull/1698

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-11-29 01:42:37 -08:00
Martin Pecka e1feccd5ae
ddns-scripts: Fix wrong whitespace in preinst and postinst scripts
Signed-off-by: Martin Pecka <peckama2@fel.cvut.cz>
2021-11-26 08:34:12 +01:00
Josef Schlehofer c559096e03 bind: update to version 9.16.23
Changelog:
https://downloads.isc.org/isc/bind9/9.16.23/RELEASE-NOTES-bind-9.16.23.html

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-11-18 08:40:52 -08:00
Josef Schlehofer 020756ecc2
Merge pull request #17114 from paper42/cve-2019-19906-19
[19.07] cyrus-sasl: patch CVE-2019-19906
2021-11-15 00:24:00 +01:00
Michal Vasilek af8fe2363d
cyrus-sasl: patch CVE-2019-19906
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit f7717bd382)
2021-11-13 16:11:23 +01:00
Michael Heimpold 1b3135bfd2
Merge pull request #17110 from thg2k/pr/19_php72_ini_1
[19.07] php7: Update and clean up distributed php7.ini
2021-11-12 07:39:46 +01:00
Giovanni Giacobbi 903d79b387
php7: Clean up and update distributed php.ini for php 7.2.34
Details:
- Cleaned up whitespace and removed comments (refer to official PHP documentation for that)
- Removed directives that no longer exist as of PHP 7.2.34
- Added '~E_DEPRECATED' to 'error_reporting'

Directives removed that no longer exist as of PHP 7.2.34:
- zend.ze1_compatibility_mode
- y2k_compliance
- register_globals
- register_long_arrays
- magic_quotes_gpc
- magic_quotes_runtime
- magic_quotes_sybase
- always_populate_raw_post_data

Signed-off-by: Giovanni Giacobbi <giovanni@giacobbi.net>
2021-11-11 10:19:24 +00:00
Josef Schlehofer 496f50a754
syslog-ng: update to version 3.34.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit d8e88ef51e)
2021-10-31 07:30:31 +01:00
Josef Schlehofer 61741b3249 ffmpeg: update to version 3.4.9 (security fix)
Fixes:
CVE-2020-13904
CVE-2020-2044
CVE-2020-20453
CVE-2020-22015
CVE-2020-22019
CVE-2020-22033
CVE-2020-22021
CVE-2020-22037
CVE-2020-35965
CVE-2021-38114
CVE-2021-38171
CVE-2021-38291

Refresh patches

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-10-30 01:13:24 -07:00
Noah Meyerhans 9abe24fb49 bind: Bump to 9.16.22
The following CVEs are addressed:

* CVE-2021-25219: The "lame-ttl" option is now forcibly set to 0. This
  effectively disables the lame server cache, as it could previously
  be abused by an attacker to significantly degrade resolver performance.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2021-10-28 21:15:16 -07:00
Josef Schlehofer cb4433c4ba tvheadend: update libhdhomerun
Recently, silicondust (developers of hdhomerun) did some cleanup and
removed old versions for hdhomerun library.

```
WGET            http://download.silicondust.com/hdhomerun/libhdhomerun_20150826.tgz
http://download.silicondust.com/hdhomerun/libhdhomerun_20150826.tgz:
2021-10-26 05:15:14 ERROR 404: Not Found.
```

And because of that, it is not possible to compile tvheadend, it ends
with following error:

```
In file included from src/input/mpegts/tvhdhomerun/tvhdhomerun.c:25:0:
src/input/mpegts/tvhdhomerun/tvhdhomerun_private.h:27:10: fatal error: libhdhomerun/hdhomerun.h: No such file or directory
 #include <libhdhomerun/hdhomerun.h>
          ^~~~~~~~~~~~~~~~~~~~~~~~~~
compilation terminated.
```

Let's fix it by updating libdhdhomerun to newer version.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-10-27 23:15:29 -07:00
Josef Schlehofer 18af9b9e21 bind: update to version 9.16.21
- Remove patch, which is part of this release, it was backported from
  upstream

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-10-24 20:37:33 -07:00
Olivier Poitrey bb0ed00885 nextdns: Update to version 1.37.3
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-10-22 10:13:59 -07:00
Alexandru Ardelean 30935b23b6
Merge pull request #16903 from jefferyto/python-package-host-dependencies-openwrt-19.07
[openwrt-19.07] python-packages: Fix host package build dependencies
2021-10-18 09:25:33 +03:00
Stan Grishin d77d598161
Merge pull request #16906 from stangri/openwrt-19.07
[19.07] vpn-policy-routing: downgrade to 0.2.1-13
2021-10-17 08:07:23 -07:00
Stan Grishin c493a603cd vpn-policy-routing: downgrade to 0.2.1-13
* there are reports that newer versions don't work on 19.07.x
* revert to older README to describe this older version

Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit 7bb2ccd4e1)
2021-10-17 14:30:52 +00:00
Jeffery To 20a9e8700b
python-dateutil: Add missing HOST_PYTHON3_PACKAGE_BUILD_DEPENDS
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-10-17 01:08:02 +08:00
Jeffery To e933f6f749
python-importlib-metadata: Pin setuptools-scm version
While a pinned/working version of setuptools-scm is installed (by
python-zipp) by the time this package is compiled, pinning the version
in this package is still the correct thing to do.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-10-17 01:01:52 +08:00
Stan Grishin a669e1e6da
Merge pull request #16900 from stangri/openwrt-19.07
[19.07] simple-adblock: update to 1.8.8-1
2021-10-15 15:29:08 -07:00
Stan Grishin a5de193e54 simple-adblock: update to 1.8.8-1
* update 'check' function

Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit d11f310230)
2021-10-15 21:52:29 +00:00
Alexandru Ardelean 1afb4019fd
Merge pull request #16879 from turris-cz/19.07-zipp
python-zipp: pin setuptools-scm version
2021-10-14 10:50:19 +03:00
Stan Grishin e1388e24e0
Merge pull request #16885 from stangri/openwrt-19.07
[19.07] https-dns-proxy: update to 2021-09-27
2021-10-13 22:08:32 -07:00
Stan Grishin af3643f9b0 https-dns-proxy: update to 2021-09-27
* update to [2021-09-27](da2501f542)
* fixes https://github.com/aarond10/https_dns_proxy/issues/125
* restart instead of reload on interface hotplug
* fixes https://github.com/openwrt/packages/issues/16794
* produce output and log entries on service start/stop
* prevent unnecessary dnsmasq restarts if service has previously updated dnsmasq settings
* allow both named and typed dnsmasq instance settings to be updated
* update 010-fix-cmakelists patch file

Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit f8d16338da)
2021-10-14 04:58:18 +00:00
Michal Vasilek f2af6941fa tor: update to 0.4.5.10
* 0.4.4 is not an LTS series, people running tor relays with 0.4.4 will
  be evicted from the tor network. 0.4.5 is an LTS series
* fix building without OpenSSL engine support (from e30f0480c8)
* refresh patches

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-10-13 18:29:46 +03:00
Josef Schlehofer 746fa830c6
python-zipp: pin setuptools-scm version
The recent version of setuptools-scm depends on tomli, which has some build issues.
Older one works.

Suggested-by: Jeffery To <jeffery.to@gmail.com>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-10-13 12:39:34 +02:00
Eneas U de Queiroz 70bb6f15e8 perl: perlmod.mk: use flock when hostpkg/perl used
Avoid parallel relinking and usage of the host perl binary by wrapping
its usage around flock calls.

Sometimes, two packages will try to relink the static host perl binary
at the same time.  Neither of them will have the other's module linked
in, and one of them will unavoidably clobber the other one's binary.

This will lead to errors when a package will not be able to find a
module that was supposed to be installed.

To fix that, an exclusive flock is used when relinking, with a 900
seconds timeout to avoid locking up the build process forever.

This is not enough because the binary may be concurrently used to build
another module package; perl is used in Configure, Compile, and Install
procedures.  If timing is right, a package will fail with a "permission
denied" error.

So a shared flock call is added in Configure, Compile, and Install
definitions for host and target, with a shorter, 300 seconds timeout.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 1e18c4324f)
2021-10-08 09:48:01 -07:00
Hannu Nyman 15305d2f2e nano: update to 5.9
Update nano editor to version 5.9.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 38143e6f8b)
(cherry picked from commit e155b3d293)
2021-10-08 18:37:02 +03:00
Hannu Nyman ece1d7bfce haveged: update to 1.9.15
Update haveged to version 1.9.15.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 1f3f63f5de)
2021-10-08 18:36:52 +03:00