Commit Graph

24150 Commits

Author SHA1 Message Date
Eneas U de Queiroz 5283711754
atheepmgr: avoid libpciaccess dependency
HAVE_LIBPCIACCESS that is currently passed through MAKE_VARS to disable
building with libpciaccess can't be set through the environment.
Instead, use CONFIG_CON_PCI, which can be passed through the environment
and will disable libpciaccess.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2021-04-15 17:26:37 -03:00
Josef Schlehofer f4a231cdf5
Merge pull request #15396 from BKPepe/update-bottle
python3-bottle: update to version 0.12.19
2021-04-12 11:14:49 +02:00
Josef Schlehofer 8770f64816
Merge pull request #15398 from BKPepe/babel-update
python-babel: update to version 2.9.0
2021-04-12 11:14:38 +02:00
Javier Marcet 75fbd91d66 python-docker: Update to 5.0.0
Breaking changes:

- Remove support for Python 2.7

- Make Python 3.6 the minimum version supported

Features:

- Add limit parameter to image search endpoint

Bugfixes:

- Fix KeyError exception on secret create

- Verify TLS keys loaded from docker contexts

- Update PORT_SPEC regex to allow square brackets for IPv6 addresses

- Fix containers and images documentation examples

Signed-off-by: Javier Marcet <javier@marcet.info>
2021-04-11 20:30:25 -07:00
Javier Marcet 138f1ccb4c docker-compose: Update to version 1.29.0
Features:

- Add profile filter to docker-compose config

- Add a depends_on condition to wait for successful service completion

Miscellaneous:

- Add image scan message on build

- Update warning message for --no-ansi to mention --ansi never as alternative

- Bump docker-py to 5.0.0

- Bump PyYAML to 5.4.1

- Bump python-dotenv to 0.17.0

Signed-off-by: Javier Marcet <javier@marcet.info>
2021-04-11 20:30:20 -07:00
Hirokazu MORIKAWA 21391a6c9c node: bump to v14.16.1
April 2021 Security Releases
- OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT (High) (CVE-2021-3450)
- OpenSSL - NULL pointer deref in signature_algorithms processing (High) (CVE-2021-3449)
- npm upgrade - Update y18n to fix Prototype-Pollution (High) (CVE-2020-7774)

OpenSSL-related vulnerabilities do not affect the OpenWrt package. Because OpenWrt's OpenSSL shared library has been updated.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-04-11 20:29:48 -07:00
Eneas U de Queiroz 2c8eb03c83
Merge pull request #15400 from cotequeiroz/circular_deps
libseccomp,crun: Fix circular deps
2021-04-11 22:00:03 -03:00
Eneas U de Queiroz 013b1895ed
Revert "libseccomp: don't build on ARC"
This reverts commit b29e609701.

Adding DEPENDS+=@!arc will cause a circular dependency, because some
packages select libseccomp based on a build option.

Commit e29483d7e ("libseccomp: workaround a recursive dependency") added
a workaround that was not properly documented, so I'll explain here.

The problem arises when libseccomp is selected depending on some config
option:

define Pakcage/foo
  DEPENDS=+FOO_SECCOMP:libseccomp

Even if the condition is correctly defined, excluding arc, such as:

define Package/foo/config
  config FOO_SECCOMP
    depends on !arc

the config generator will parse libseccomp's DEPENDS variable and
generate menuconfig statements like these:

config PACKAGE_foo
   select PACKAGE_libseccomp if FOO_SECCOMP
   depends on !FOO_SECCOMP || !arc

The last condition is always true because FOO_SECCOMP will always be
be false when arc is true.  The config generator is not able to
simplify/optimize the condition.

The circular dependecy occurs because FOO_SECCOMP depends on
PACKAGE_foo, and the redundant, always true line will make PACKAGE_foo
depend on FOO_SECCOMP.

As a workaround, we can add the 'depends on !arc' line to
Package/libseccomp/config, outside of the DEPENDS variable, so that the
redundant depends line line does not get generated.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
Cc: Daniel Golle <daniel@makrotopia.org>
2021-04-11 21:21:48 -03:00
Eneas U de Queiroz 048e1d2d63
crun: Don't build on arc
The package needs libseccomp, which does not currently support arc.
In order to avoid a circular dependency, we must avoid arc here as well.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2021-04-11 21:21:14 -03:00
Philip Prindeville 61b2a35a35
Merge pull request #15382 from cotequeiroz/strongswan
strongswan: libnttft must not select strongswan
2021-04-11 17:10:58 -06:00
Josef Schlehofer a31dc44d2d
python-babel: update to version 2.9.0
Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-04-12 01:05:36 +02:00
Josef Schlehofer 1a4b2b41fb
python3-bottle: update to version 0.12.19
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-04-12 00:47:57 +02:00
Robin Rainton 8695a18c56 node: #14983 NODEJS_ICU_SMALL is default
Signed-off-by: Robin Rainton <robin@rainton.com>
2021-04-11 13:39:24 +02:00
Tiago Gaspar 5f65d87bb7 netdata: disable shared memory totals by default
Fix log spam:
daemon.err netdata[2090]: PROCFILE: Cannot open file '/proc/sysvipc/shm'
This is caused by a non existant /proc/sysvipc/shm because of the
CONFIG_PROC_STRIPPED option that is enabled by default in the kernel
generic target config

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
2021-04-11 09:57:51 +02:00
Stan Grishin cd11d8821f https-dns-proxy: bugfix: race condition with dnsmasq
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-04-10 16:58:51 -10:00
Paul Spooren 05863bf273 CI: remove leftover travis files
THe current CI uses both CircleCI and GitHub Action CI, but not Travis.

Signed-off-by: Paul Spooren <mail@aparcar.org>
2021-04-10 16:57:36 -10:00
Daniel Golle a4b034cf68
uvol: some improvements
* use lvm --reportformat json
 * add 'list' and 'align' commands
 * add help output

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-04-11 01:42:58 +01:00
Stan Grishin 231d40053b simple-adblock: update to 1.8.7-3
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-04-10 17:08:51 -07:00
Rosen Penev 4ebab065ae taglib: fix config file paths
Gerbera stupidly uses taglib-config to find the paths. Fix them to avoid
adding /usr/lib

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-10 17:05:18 -07:00
Rosen Penev 94c672d46f gerbera: update to 1.8.0
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-10 17:05:18 -07:00
Rosen Penev 8bd1d86d6d libnpupnp: update to 4.1.3
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-10 17:05:18 -07:00
Rosen Penev 1692a687fb spdlog: update to 1.8.5
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-10 17:05:18 -07:00
Rosen Penev 2cdc64b12a file: update to 5.40
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-10 17:05:18 -07:00
Daniel Golle 2d9b46e677
ovsd: improve package style and update source
Fix post-merge comments in #15316 and update source.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-04-10 16:56:44 +01:00
Daniel Golle 1e1e7af6a9
modbus-utils: remove accidentally added package
modbus-utils was not intended to be added at this stage. Remove it.

Fixes: 312594f86 ("uvol: add new package")
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-04-10 13:33:17 +01:00
Gregory L. Dietsche 49535edffd safe-search: prevent duplicate cron job installation
This patch prevents multiple cron jobs from being created to run the
safe-search-maintenance script.

To reproduce this bug, perform the following:
  - Install safe-search
  - Perform an OpenWRT firmware upgrade (choose to preserve user settings)
  - Install safe-search again

Signed-off-by: Gregory L. Dietsche <gregory.dietsche@cuw.edu>
2021-04-10 14:28:25 +02:00
Daniel Golle 0d505441be
ap_config: remove accidentally added package
Fixes: 312594f86 ("uvol: add new package")
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-04-10 12:53:26 +01:00
Daniel Golle 312594f869
uvol: add new package
uvol is a wrapper-script which allows automated handling of storage
volumes. uvol currently comes with backend support for LVM2 and UBI,
covering practically all options for storage large enough to be
managed (NAND, SPI-NAND, eMMC, SATA, NVME, virtio-blk, ...).

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-04-10 12:02:23 +01:00
Daniel Golle 43597b918a
lvm2: don't use `-normal` suffix for non-SELinux variants
This was probably a work-around for an issue with dependencies which
was fixed by
988ed00802

Remove it as all other packages with `-selinux` variants do provide
a non-SELinux-variant without any suffix and that works now, see
procd vs. procd-selinux
busybox vs. busybox-selinux

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-04-10 12:01:59 +01:00
Eneas U de Queiroz e50ba32402
strongswan: libnttft must not select strongswan
The strongswan-libnttfft package should not select the strongswan
package, but should depend on it instead.  Otherwise a circular
dependency is created.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2021-04-09 23:54:43 -03:00
Dirk Brenken ec20e9df96
adblock: fix games_tracking source url
Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-04-09 18:42:30 +02:00
Daniel Golle d2f8d9c90f
autopart: use '-' to separate drive serial in volume name
Instead of just appending the driver serial including the '0x' prefix,
use '-' prefix instead to make it more readable.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-04-09 17:33:21 +01:00
Jianhui Zhao 3aa128f007 libuhttpd: Update to 3.11.0
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2021-04-08 22:32:11 -07:00
Philip Prindeville e44b2665e7
Merge pull request #6924 from derekyerger/strongswan-lattice-sha3
strongswan: add more crypto plugins
2021-04-08 22:26:56 -06:00
Josef Schlehofer 7c80ef5f76
Merge pull request #15353 from ja-pa/knot-resolver-5.3.1
knot-resolver: update to version 5.3.1
2021-04-07 14:17:57 +02:00
Rosen Penev c6fa2d5bfa ksmbd-tools: update to 3.3.8
Major changes are:
  disable symlink by default.
  remove smack inherit leftovers.
  Enable guest access on IPC$ share by default.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-07 00:46:54 -07:00
Kirill Nikolaev 272b0a5c18 ksmbd-tools: Add a mDNS TXT record for the ksmbd service
MacOS ignores Bonjour services for which TXT records are not returned. This changes forces umdns service to return a TXT record (`daemon=ksmbd`) for the ksmbd service. The exact content is unimportant and to the best of my knowledge nothing reads the `daemon` tag.

Symptoms of the problem (which are also debugging steps):
* Finder refuses to open the OpenWRT "computer" in the Network list.
* Discovery.app (Bonjour Browser) lists the _ssh._tcp service, but the submenu for it doesn't unfold and no address is shown.
* `dns-sd -L OpenWrt _smb._tcp` doesn't return any address.

Signed-off-by: Kirill Nikolaev <cyril7@gmail.com>
2021-04-07 00:46:54 -07:00
Rosen Penev fa6f182a21 ksmbd: update to 3.3.8
Major changes are:
  clean-up codes using checkpatch --strict option.
  fix several warning and build failure from linux-next.
  change the minimum supported kernel version to v5.4.
  use xarray for tree connect list.
  fix reviews from lkml.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-07 00:46:54 -07:00
Jan Pavlinec 354523d5b5 ooniprobe: update to version 3.9.0
Remove getrescources call because it is no longer
required.

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-04-07 10:17:23 +03:00
Jan Pavlinec 4e979ceb6b python-pytest: update to version 6.2.3
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-04-07 10:16:56 +03:00
Hannu Nyman 90e45ce5be
Merge pull request #15235 from TDT-AG/pr/20210323-collectd-mod-ubi
collectd: add bad blocks percent calculation for ubi plugin
2021-04-07 10:16:28 +03:00
Josef Schlehofer e21d493964
Merge pull request #15359 from BKPepe/zeroconf
zeroconf: update to version 0.29.0
2021-04-07 00:23:19 +02:00
Josef Schlehofer c09cd1868c
Merge pull request #15358 from BKPepe/ytdl
youtube-dl: update to version 2021.4.7
2021-04-07 00:23:08 +02:00
Rosen Penev 3d65773650 minisatip: add libdvbcsa support
Unconditionally enable with BUILD_PATENTED.

Simplify configure args.

Add missing PKG_CONFIG_DEPENDS

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-06 15:22:35 -07:00
Rosen Penev ed15856aef lualanes: build with CMake
Faster to compile.

Add license information.

Several cleanups for consistency between packages.

Small patch fix now that uClibc-ng is gone.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-06 15:22:08 -07:00
Josef Schlehofer 757b0ea647
zeroconf: update to version 0.29.0
Update copyright in Makefile

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-04-06 22:48:19 +02:00
Josef Schlehofer 701ded952a
youtube-dl: update to version 2021.4.7
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-04-06 22:45:06 +02:00
Jan Pavlinec 3e3025b191
knot-resolver: update to version 5.3.1
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-04-06 12:41:17 +02:00
Karl Palsson d4e5f38147 mosquitto: bump to 2.0.10
This is a security fix, affecting 2.0.0 through to 2.0.9.  Mosquitto instances
could be remotely DoS'd by authenticated clients.

Release notes at: https://github.com/eclipse/mosquitto/blob/v2.0.10/ChangeLog.txt
CVE number has not yet been assigned.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-04-06 10:33:56 +00:00
Christian Lachner b94645c68a haproxy: Update HAProxy to v2.2.13
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2021-04-06 12:56:05 +03:00