Commit Graph

19540 Commits

Author SHA1 Message Date
Hannu Nyman 9f86c338cc
Merge pull request #12230 from jefferyto/python-openssl-ca-certs
python3-openssl: Add dependency on ca-certs
2020-05-20 08:18:38 +03:00
Rosen Penev 37157ceb0c
Merge pull request #12213 from neheb/gerb78
gerbera: add libmatroska support
2020-05-19 22:16:45 -07:00
Rosen Penev 2fef01837d
Merge pull request #12226 from neheb/mpd-id
mpd: enable id3tag for all builds
2020-05-19 22:15:37 -07:00
Rosen Penev 71975d68a4 cifs-utils: fix compilation
Now that libcap-ng is in the tree, cifs-utils is picking it up.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-19 22:14:10 -07:00
Josef Schlehofer 64926ff607
Merge pull request #12217 from jefferyto/measurement-kit-static-depends
measurement-kit: Add static build dependencies
2020-05-20 00:22:17 +02:00
Rosen Penev a642cef8ad
Merge pull request #12197 from BKPepe/syslog-ng
syslog-ng: update to version 3.27.1
2020-05-19 15:15:11 -07:00
Rosen Penev 4ed61c1f68
mpd: enable id3tag for all builds
2cedae0aa9 enabled mp3 support for mini,
while keeping id3tag for full. This makes no sense as id3tag is used
specifically for mp3 files.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-19 14:37:28 -07:00
Rosen Penev 32d3dac6f0
ffmpeg: fix compilation with glibc
No idea why.

Patch submitted upstream:
https://patchwork.ffmpeg.org/project/ffmpeg/patch/20200503090023.29418-1-rosenp@gmail.com/

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-19 14:24:00 -07:00
Jeffery To d2b0cc523d python3-openssl: Add dependency on ca-certs
The ssl module assumes OpenSSL can load the default trust anchors (root
CA certificates).

From https://github.com/openwrt/packages/issues/12209

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-20 04:30:45 +08:00
Hannu Nyman 5e84c4872c
Merge pull request #12210 from jefferyto/etesync-server-minor-cleanup
etesync-server: Minor Makefile cleanup
2020-05-19 17:01:14 +03:00
Jeffery To 19694767f2 measurement-kit: Add static build dependencies
When measurement-kit is a build dependency (in PKG_BUILD_DEPENDS) of
another package, this package's build dependencies (in DEPENDS) may not
be selected and so may not be built.

(This package does not produce a shared library; the measurement-kit
target package contains a program that is statically linked to the
measurement-kit library. Other packages may include measurement-kit in
their PKG_BUILD_DEPENDS to link to the static library but not include
measurement-kit as a run-time dependency.)

This adds PKG_BUILD_DEPENDS to this package to ensure that its
dependencies are built in this case.

This also adds MEASUREMENT_KIT_BUILD_DEPENDS that dependant packages
should select to ensure that this package's dependencies are correctly
built. (libevent2-openssl and libevent2-pthreads need to be selected for
the necessary functionality to be enabled when compiling libevent2.)

This also adds openssl as an explicit dependency; it appears to be used
directly by this package.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-19 17:44:14 +08:00
Josef Schlehofer 8ccff44ad1
unbound: update to version 1.10.1
Fixes:
CVE-2020-12662
CVE-2020-12663

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-05-19 11:23:57 +02:00
Rosen Penev ee9fe907e7
Merge pull request #12212 from lnslbrty/package/netsniff-ng
netsniff-ng: new package
2020-05-19 01:18:00 -07:00
Toni Uhlig 563b1225ff
netsniff-ng: new package
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
2020-05-19 09:55:00 +02:00
Rosen Penev f29fe25472
gerbera: add libmatroska support
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-18 20:23:01 -07:00
Rosen Penev d265c88ebe
libmatroska: add
Needed for gerbera's matroska support.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-18 20:23:01 -07:00
Rosen Penev 116f11e54c
libebml: add
Needed for libmatroska.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-18 20:22:50 -07:00
Robert Marko 9f43594e3a lxc: bump to 4.0.2
Signed-off-by: Robert Marko <robert.marko@sartura.hr>
Signed-off-by: Marijan Svalina <marijan.svalina@sartura.hr>
Signed-off-by: Luka Perkov <luka.perkov@sartura.hr>
2020-05-19 00:19:15 +02:00
Jeffery To 70064ea4ad etesync-server: Minor Makefile cleanup
* Replace creating an empty PYTHON3_PKG_DIR with setting filespec to an
  empty value

* Disable the default Python package build recipe (with
  PYTHON3_PKG_BUILD:=0) and set an empty Build/Compile

* Remove VARIANT:=python3 and PROVIDES (providing the same name as the
  package)

* Add PKG_BUILD_PARALLEL:=1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-19 00:19:54 +08:00
Karl Palsson 34a4678db3 c-ares: update to 1.16.1
Various fixes, nothing particularly standout as of particular interest
to OpenWrt.  Full changelog at https://c-ares.haxx.se/changelog.html

Signed-off-by: Karl Palsson <karlp@etactica.com>
2020-05-18 13:02:36 +00:00
Rosen Penev d5e9dfffa7
Merge pull request #12208 from jefferyto/python-enable-optimizations
python3: Enable compile-time optimizations
2020-05-18 03:03:40 -07:00
Rosen Penev 711456a4db libmicrohttpd: build with PIC
Fixes compilation when linking statically.

Made URL HTTPS.

Moved description section for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-18 11:55:05 +02:00
Jeffery To be9a554a26 python3: Enable compile-time optimizations
This adds the --enable-optimizations configure option (for
profile-guided optimization) for both host and target Python, and the
--with-lto configure option (for link-time optimization) for target
Python (for non-MIPS platforms).

Currently, compiling Python with LTO leads to link errors on mips and
mipsel. (Compiling with LTO appears to succeed on mips64 but there is
only one mips64 target available for convenient testing.)

This also cleans up the host and target configure options:

* Sort options/variables
  - Alphabetically
  - Flags/options before child-process environment variables
  - Group options by type (enable/disable/with/without)
  - Static options/variables before conditional ones

* Remove the prefix/dir options, as they are the same as the defaults
  set by the build system

* Remove --with-threads, as it is no longer a valid option (threads are
  always enabled)

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-18 15:01:17 +08:00
Rosen Penev 7c93d5544d
Merge pull request #12192 from lucize/libreswipv6
libreswan: various fixes
2020-05-17 23:47:54 -07:00
Hannu Nyman 24129419d0
Merge pull request #12205 from micmac1/mar-master-10413
mariadb: minor verison bump with CVE fixes
2020-05-18 00:00:08 +03:00
Sebastian Kemper 0e1a289613 mariadb: bump to 10.4.13
Upstream added define INSTALL_PAMDATADIR, so hardcoded path is gone.

Fixes:

  CVE-2020-2752
  CVE-2020-2812
  CVE-2020-2814
  CVE-2020-2760

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-17 22:18:25 +02:00
Sebastian Kemper 980291575e libmariadb: bump to 3.1.8
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-17 22:15:40 +02:00
Josef Schlehofer d4db36ea09
syslog-ng: update to version 3.27.1
snmp-dest was moved to afsnmp

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-05-17 17:54:04 +02:00
Kevin Darbyshire-Bryant a809dc6f3b collectd: Improve sqm_collectd error reporting
Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2020-05-17 16:17:07 +01:00
Josef Schlehofer cb7d8210d3
Merge pull request #12091 from pprindeville/syslog-ng-restore-reload
syslog-ng: restore service "reload" to actually working
2020-05-17 15:40:48 +02:00
Hannu Nyman a5af595a55
Merge pull request #12193 from lnslbrty/master
netatop: update to version 3.1
2020-05-17 13:08:48 +03:00
Toni Uhlig c25b61ac02
netatop: update to version 3.1
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
2020-05-17 12:01:28 +02:00
Rosen Penev 498527fa50
Merge pull request #12191 from neheb/libwebp
libwebp: fix compilation under ARM without NEON
2020-05-17 00:24:21 -07:00
Lucian Cristian a659c58f29 libreswan: various fixes
start if kernel has missing ipv6 support
add libcap-ng support
fix some errors displayed on syslog

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-17 04:57:48 +03:00
Rosen Penev a80658beeb
libwebp: fix compilation under ARM without NEON
The CMake logic seems broken. Luckily it's easy to work around.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-16 18:29:08 -07:00
Rosen Penev 541769ddf4
fuse3: add
libfuse3 is used by newer versions of sshfs.

utils require udev, which is not present in OpenWrt.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-16 17:31:51 -07:00
Rosen Penev 45c37a235a
fuse: update to 2.9.9
Refreshed patches.

Fixed license information.

Minor adjustments.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-16 17:26:30 -07:00
Rosen Penev 348358bd50
fuse: import from base
This belongs here. All dependent packages are located here.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-16 17:26:30 -07:00
Rosen Penev dad8672037
Merge pull request #12180 from lucize/libcapng
libcap-ng: add package libcap-ng
2020-05-16 16:42:58 -07:00
Hannu Nyman 479e438400
Merge pull request #12188 from jefferyto/golang-1.14.3
golang: Update to 1.14.3
2020-05-16 23:41:55 +03:00
Jeffery To 2b8f9b7349 golang: Update to 1.14.3
This also removes a (useless) test for PKG_GO_ZBOOTSTRAP_MODS (it is
always non-empty).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-17 03:37:45 +08:00
Rosen Penev 7235ec41c3
Merge pull request #12181 from micmac1/apa-suid
apache: tighten log dir + suEXEC
2020-05-16 12:26:09 -07:00
Hannu Nyman ca408508d5
Merge pull request #12186 from lucize/nsslto
nss: revert -flto change
2020-05-16 21:30:37 +03:00
Lucian Cristian 630c19f648 nss: revert -flto change
it seems that it can lead to segfault in libfreebl3.so

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-16 21:06:53 +03:00
Sebastian Kemper 07db6b4a39 apache: revisit suEXEC setup
When adding suEXEC to the apache package, Alpine's package [1] served as
a template. Not enough attention was paid to the details.

Alpine uses a different layout. So for OpenWrt to use /var/www as
DocumentRoot does not make sense. /var is also volatile on OpenWrt. This
commit removes the configure argument. The default is htdocsdir.

This also does away with uidmin/gidmin 99. The default is 100, which is
fine.

Finally, the suexec binary is moved from /usr/sbin to
/usr/lib/apache2/suexec_dir. Upstream recommends installing suexec with
"4750" (see [2]) and the group set to the user's group. While that would
be possible, it would cause a few headaches on OpenWrt. The group would
need to be changed first in a post-install script and a call to chmod
would need to be made afterward, to make the binary SUID again.

It's easier to hide the SUID binary away from others in a directory.
This way we don't need to use chmod in the post-install script.

[1] https://github.com/alpinelinux/aports/tree/master/main/apache2
[2] https://httpd.apache.org/docs/2.4/suexec.html

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-16 14:47:37 +02:00
Lucian Cristian 16ecc549f1 libcap-ng: add package libcap-ng
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-16 15:28:52 +03:00
Sebastian Kemper dbaad2fa44 apache: create log directory o=
Hides away the contents of the log directory from others.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-16 14:24:05 +02:00
Michael Heimpold 04575c258e php7-pecl-redis: update to 5.2.2
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-05-16 14:09:51 +02:00
Michael Heimpold ceb660cc61 php7: update to 7.4.6
This fixes:
  - CVE-2019-11048

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-05-16 13:56:33 +02:00
Hannu Nyman 909f4c6638
Merge pull request #12179 from wvdakker/master
Shorewall: Bump to 5.2.4.5
2020-05-16 11:58:13 +03:00