Commit Graph

2384 Commits

Author SHA1 Message Date
Karel Kočí e2885b9ddd
vim: variants conflict with each other
This adds conflicts between the variants,
because they provide the same files, and it should not be
possible to install them side by side. Otherwise, it might happen that
half files would be from one variant and the other half from the
other.

Also, adds provides as if you request to install ``vim`` and
``vim-full``, then the request could be satisfied even they collide,
because ``vim-full`` provides ``vim`` package.

Signed-off-by: Karel Kočí <cynerd@email.cz>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[add commit message]
(cherry picked from commit 46c058468a)
2022-08-24 08:25:54 +02:00
Hannu Nyman 5cc4212d7f
haveged: update to 1.9.18
Update haveged to version 1.9.18

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 8579494bbb)
2022-07-01 19:01:29 +02:00
Stijn Tintel cf0d586c7f
Revert "lxc: export systemd cgroups after install"
The postinst script is sourced during image build, which causes the
follow failure:
/home/stijn/Development/OpenWrt/openwrt/build_dir/target-x86_64_musl/root-x86/etc/init.d/lxc-auto: line 3: /lib/functions.sh: No such file or directory
postinst script ./usr/lib/opkg/info/lxc-auto.postinst has failed with exit code 1

Sourcing /lib/functions.sh is not needed, as /etc/rc.common does so
already. Unfortunately removing that line from the init script is not
enough to fix the problem. The postinst script should also check
IPKG_INSTROOT. As these two changes are unrelated, they should go in
separate commits, and the solution to the image build problem is to
revert the commit that introduced the breakage.

This reverts commit 2cde10b950.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2022-06-24 12:20:43 +02:00
Michal Vasilek 70b0ff8a48
lxc: export systemd cgroups after install
otherwise, a user would have to either manually run /etc/init.d/lxc-auto
boot or reboot the system to start using lxc.

originally committed in 2cde10b950
reverted in 039912dec5

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 7da7356539)
2022-06-24 12:19:14 +02:00
Josef Schlehofer 685893c968
beep: change git repository to fix CVE-2018-0492 and CVE-2018-1000532
1. Changed Git repository, which is used for Fedora packaging
https://github.com/johnath/beep/issues/11#issuecomment-450277122

Fixed CVEs:
CVE-2018-0492 - https://nvd.nist.gov/vuln/detail/CVE-2018-0492
CVE-2018-1000532 - https://nvd.nist.gov/vuln/detail/CVE-2018-1000532

2. Fixed SPDX License Identifier

3. Add patch to comment out -D_FORTIFY_SOURCE
Otherwise, it can not be built by default.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 6488eaf250)
2022-06-10 13:54:51 +02:00
Yanase Yuki e0a2e6f41c
beep: restore a dependency definition to the previous one on x86 target
Commit 9bcea2de2c causes a dependency
problem with some out-of-tree packages which expect "DEPENDS:=+kmod-pcspkr".

To fix this problem, this commit restores a dependency definition to
the previous one on x86 target.

Signed-off-by: Yanase Yuki <dev@zpc.sakura.ne.jp>
(cherry picked from commit 8b1216fb49)
2022-06-10 13:54:49 +02:00
Yanase Yuki 02d4a7161e
beep: fix dependency to support non-x86 target and kmod-gpio-beeper
Beep is a target-independent software that can handle buzzers controlled by kmod-gpio-beeper.

This change is useful for some non-x86 enterprise APs and development boards
that have a buzzer connected to GPIO.

Compile-tested: ath79, ELECOM WAB-I1750-PS, 3fab4ac + device support patch
Run-tested: ath79, ELECOM WAB-I1750-PS, 3fab4ac + device support patch

Signed-off-by: Yanase Yuki <dev@zpc.sakura.ne.jp>
(cherry picked from commit 9bcea2de2c)
2022-06-10 13:54:45 +02:00
Yanase Yuki 21ee1aa46a
beep: add missing PKG_MIRROR_HASH
Signed-off-by: Yanase Yuki <dev@zpc.sakura.ne.jp>
(cherry picked from commit ac52356c0b)
2022-06-10 13:54:40 +02:00
Michal Vasilek a44cb1e277
lxc: export systemd cgroups after install
otherwise, a user would have to either manually run /etc/init.d/lxc-auto
boot or reboot the system to start using lxc.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 2cde10b950)
2022-05-15 07:30:35 +02:00
Matthias Schiffer c21547330a
ecdsautils: update to v0.4.1
This fixes CVE-2022-24884.

Also update the package URL to match the source repository.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit de5671e582)
2022-05-05 18:53:44 +02:00
Luiz Angelo Daros de Luca cae913febb
sane-backends: revert BUILDONLY flag
BUILDONLY was disabling SANE backends (drivers) build.

Closes #14484

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit bf4340e19e)
2022-04-22 13:00:48 +02:00
Hannu Nyman 5a842639dc nano: provide nano-full with most features enabled
Provide a new variant, nano-full, that enables almost
all functionality of nano. Only libmagic file type detection
has been left out.

Ship with a minimal /etc/nanorc that the user can modify.
nanorc documentation at
https://www.nano-editor.org/dist/latest/nanorc.5.html

Provide color highlighting for the uci config files.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 6a51794638)
2022-03-24 20:32:07 +02:00
Hannu Nyman 4c461f9e85 nano: update to 6.2
Update nano to 6.2.
Remove inactive second maintainer.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit a3f14c5114)
[removed AUTORELEASE]
2022-02-22 19:23:58 +02:00
Hannu Nyman 8129d30e36 nano: update to 6.1
Update nano to version 6.1.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 717efb8c96)
[removed aurorelease]
2022-02-09 18:30:46 +02:00
Hannu Nyman 5578d60f9a nano: Add a plus variant with more features
Nano is by default built as "tiny" with most features disabled.
That is suitable for basic tasks in routers with small flash.

Add a new nano-plus variant that enables selected additional
features in the build config:
 * multiple files (multibuffer)
 * Unicode/utf8
 * justify
 * .nanorc support
 * help
 * also some key bindings get enabled as "tiny" configure option
   is removed.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 85cb71d8d8)
2022-02-01 23:44:21 +02:00
Josef Schlehofer 765307772f domoticz: backport patch to fix compilation with uClibc-ng
This helps to compile domoticz on arc target.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-01-18 18:07:49 -08:00
Stijn Tintel 572392a8ac domoticz: bump to 4.10717
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 7e50722145)
2022-01-18 18:07:49 -08:00
Rosen Penev 8d91ba86a9 domoticz: Fix compilation without deprecated OpenSSL APIs
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8c77bcc19f)
2022-01-18 18:07:49 -08:00
Hannu Nyman 4af8afe6cc haveged: update to 1.9.17
Update havged to version 1.9.17.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit e065ccda94)
(Autorelease removed)
2022-01-09 19:03:57 +02:00
Josef Schlehofer 0e3869c2ad
Merge pull request #17476 from BKPepe/buildonly
treewide: add missing BUILDONLY
2022-01-03 19:58:33 +01:00
Rosen Penev f299c29a45
treewide: add missing BUILDONLY
Fixes Makefile warnings:

WARNING: skipping X -- package has no install section

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 5a7148d112)
2022-01-02 10:02:23 +01:00
Karel Kočí 64d0238a1b
zsh: drop bash syntax in postinst
Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry picked from commit c09d6042fe)
2021-12-17 23:48:23 +01:00
Karel Kočí ea3e54accd
zsh: fix invalid postrm script and little refactor of scripts
The postrm script was missing shebang. Postrm scripts are packaged and
executed directly and not sourced by default script (as in case of prerm
and postinst).

Also move some indents around to not confuse reader. The section in
postinst was indented to same level as grep "condition" but is on same
level as initial grep (not part of that "condition").

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry picked from commit d2d193d818)
2021-12-17 23:48:16 +01:00
Hannu Nyman 5a9b5ee78c nano: update to version 6.0
Update nano editor to version 6.0

Version 6.0 enable toggling the display of the line numbers with
the shortcut key M-N (Alt-n). Also the cmdline option "-l" works.
Remove earlier patch regarding that.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

(backported from commits 0571f5400, 9023845d5 and ae7f62d63)
2021-12-16 20:35:01 +02:00
Hannu Nyman 15305d2f2e nano: update to 5.9
Update nano editor to version 5.9.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 38143e6f8b)
(cherry picked from commit e155b3d293)
2021-10-08 18:37:02 +03:00
Hannu Nyman ece1d7bfce haveged: update to 1.9.15
Update haveged to version 1.9.15.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 1f3f63f5de)
2021-10-08 18:36:52 +03:00
Michal Vasilek 6dc494fddf ntfs-3g: patch CVE-2019-9755
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-09-10 13:11:44 -07:00
Jeffery To 1dd040f9ca
treewide: Remove GO_PKG_LDFLAGS for stripping binaries
The "-s -w" flags in GO_PKG_LDFLAGS tells the Go compiler to strip the
binaries it produces. Since the default Go package build process will
strip binaries when CONFIG_USE_STRIP or CONFIG_USE_SSTRIP are selected,
these flags are unnecessary.

When CONFIG_NO_STRIP is selected, these flags override the user's
intention of building unstripped packages.

This removes these flags for all relevant packages.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-09-02 06:36:01 +08:00
Josef Schlehofer 5982af9ed5
Merge pull request #16412 from paper42/tar-cve-19
[19.07] tar: fix CVE-2021-20193
2021-08-22 09:34:58 +02:00
Michal Vasilek 8ff2671b22
tar: fix CVE-2021-20193
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-08-20 16:17:56 +02:00
Michal Vasilek 3862bb3e6d
mc: add a missing Syntax file
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 312caff03b)
Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-08-20 12:02:52 +02:00
Michal Vasilek b39f185bdf
mc: update to 2.8.27
* fixes CVE-2021-36370
* refresh patches

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-08-18 15:05:33 +02:00
Josef Schlehofer 21ab2ee937
Merge pull request #16087 from turris-cz/19.07/lxc-update-gpg-keyserver
lxc: add patch to switch GPG server
2021-07-11 20:44:23 +02:00
Josef Schlehofer b86ca1563b
lxc: add patch to switch GPG server
By default, there was used sks-keyservers.net pool, which has invalid
SSL certificate and they also announced that their service is deprecate
and no longer maintained.

Use the same GPG server as LXC is using by default in the newer
releases.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-07-10 17:38:41 +02:00
Hannu Nyman 0f5fbe1f5b nano: update to 5.8
Update nano editor version to 5.8.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 6f2ac237a1)
2021-06-17 19:05:04 +03:00
Hannu Nyman e05c97a191 nano: update version to 5.7
Upgrade nano editor to version 5.7.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 765e986857)
2021-05-01 23:52:23 +03:00
Hannu Nyman 11dc840326 irqbalance: upgrade to version 1.8.0
Upgrade irqbalance to version 1.8.0

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 6631cfaa61)
2021-04-18 18:29:02 +03:00
Karel Kočí 56e1674efc
rpcd-mod-lxc: add postinst to reload rpcd on update/installation
This is dependency of luci-app-lxc and when users install that package
it is no way clear that they have to reload rpcd to get it working
correctly. Without it container listing does not work.
In general this reload should be in this package simply because other
rpcd-mod-* packages reload rpcd as well.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry picked from commit 54b6116d7d)
2021-04-09 10:46:16 +02:00
Jan Pavlinec abb3c7ede0
mariadb: update to version 10.2.37
Fixes CVE-2021-27928

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-03-25 14:30:51 +01:00
Josef Schlehofer 612fbeb58f
nnn: update to version 3.4
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 53f54c45e4)
2021-03-22 02:06:16 +01:00
Hannu Nyman 85d122fdc7 nano: update to 5.6.1
Update nano editor to version 5.6.1

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 0f4138db0b)
2021-03-06 10:29:08 +02:00
Hannu Nyman 2666b3d00d nano: update to version 5.6
Upgrade nano to version 5.6

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit dffdfe4ac8)
2021-02-25 16:58:50 +02:00
Josef Schlehofer 523011bf49 screen: backport fix for CVE-2021-26937
Security reports:
- https://lists.gnu.org/archive/html/screen-devel/2021-02/msg00000.html
This issue can be reproduced even on OpenWrt
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=982435

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c250298fa3)
2021-02-23 06:11:38 -05:00
Tianling Shen 95fa96bda2
ttyd: force enable authentication for login
Currently, we called `/usr/libexec/login.sh` as login command, but unfortunately the auth
is disabled by default in it[1], and this is really serious as it could be a free "backdoor"
for any spoiler who has conntectd to the router via LAN or wireless.

In my option, it shouldn't be exposed to anyone without auth, so I set the default login
command to `/bin/login`. And for those who really want that, they can do it themselves.

1. `login.sh` adjusts whether use authentication or not from system config named ttylogin,
which is set to disabled by default. See package/base-files/files/bin/config_generate#L243.

Signed-off-by: Tianling Shen <cnsztl@project-openwrt.eu.org>

Backported from f45bb2981d
2021-02-10 19:20:09 +08:00
Hannu Nyman 93d3bfd080 nano: update to 5.5
Update nano editor to version 5.5

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit be75f77973)
2021-01-15 15:55:51 +02:00
Rosen Penev 1224d6c213
idevicerestore: update to 1.0.0
Switched to upstream tarballs as they are now available

Removed autoreconf as a result.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 18f3410ac4)
2021-01-14 17:03:50 -08:00
Rosen Penev 9cfae98a7a
idevicerestore: update to 2020-04-20
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b112de71e1)
2021-01-14 17:03:50 -08:00
Rosen Penev 23f85f8fa5
idevicerestore: update to 2020-02-17
Fix compilation under glibc.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 355d8b1388)
2021-01-14 17:03:50 -08:00
Rosen Penev cb2d403463
idevicerestore: Update to 2019-12-26
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 905c7c62fb)
2021-01-14 17:03:49 -08:00
Rosen Penev 202469750f
idevicerestore: Add package
Allows to flash an iOS device without using iTunes.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 9fbe1c247e)
2021-01-14 17:03:49 -08:00