1
0
mirror of https://git.openwrt.org/feed/packages.git synced 2024-06-24 08:37:37 +02:00
Commit Graph

26664 Commits

Author SHA1 Message Date
Josef Schlehofer
dcedbe8027 prosody: update to version 0.11.13
Fixes CVEs:
- CVE-2022-0217
- CVE-2021-37601
- CVE-2021-32918
- CVE-2021-32920
- CVE-2021-32921
- CVE-2021-32917
- CVE-2021-32919

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-01-28 12:10:09 -08:00
Andy Walsh
7730a65d30 samba4: update to 4.14.11; fix AD_DC build
* update to 4.14.11
* fix AD_DC build
* add vfs_widelinks to defaults
* refresh patches
* fixes: #16697, #17692
* fixes: CVE-2016-2124, CVE-2020-25717, CVE-2020-25718, CVE-2020-25719, CVE-2020-25721, CVE-2020-25722, CVE-2021-3738, CVE-2021-23192

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2022-01-28 12:09:09 -08:00
Sergey V. Lobanov
99086dc44b open2300: fix build on macos
This patch sets UNAME=Linux due to OpenWrt is always Linux but
`uname -s` return Darwin on MacOS and fails target build.

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-28 12:08:38 -08:00
Sergey V. Lobanov
768a832df1 isc-dhcp: fix build on macos
isc-dhcp uses system ar tool so build fails on Darwin build host.
Embedded bind lib uses system ar and ranlib tools and fails on Darwin

This patch explicitly specifies ar and ranlib tools for target build

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-28 12:08:27 -08:00
Josef Schlehofer
98332fea15
Merge pull request #17713 from turris-cz/clamav-update
clamav: update to version 0.104.2
2022-01-28 17:34:48 +01:00
Josef Schlehofer
eddbb64bc9
clamav: update to version 0.104.2
Backported upstream pending pull request to fix following error:

CMake Error at /foo/staging_dir/host/share/cmake-3.19/Modules/FindPackageHandleStandardArgs.cmake:218 (message):
  Could NOT find CURSES (missing: CURSES_LIBRARY)

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-01-28 15:22:32 +01:00
Kerma Gérald
d2fd1f8346 crowdsec: update from latest upstream release 1.3.0
Changes (from 1.2.3):
https://github.com/crowdsecurity/crowdsec/compare/v1.2.3...v1.3.0

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-01-27 17:43:16 -08:00
Daniel Golle
19c135685f
auc: add '-n' parameter for dry-run
Add option to allow only requesting an image but not actually download
or sysupgrade anything.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-01-27 17:26:28 +00:00
Florian Eckert
64da77a4fd
Merge pull request #17646 from LugicoHDPlayer/feature-ddns-scripts-one-com
ddns-scripts: add one.com provider
2022-01-27 16:06:09 +01:00
Luca Conte
60047cdce1 ddns-scripts: add one.com provider
Signed-off-by: Luca Conte <main@lugico.de>
2022-01-27 13:59:42 +01:00
Sergey V. Lobanov
373bb8e4e7 reptyr: fix build on macos
This patch sets UNAME_S=Linux due to OpenWrt is always Linux but
`uname -s` return Darwin on MacOS and fails target build.

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-26 23:01:10 +01:00
Tiago Gaspar
fadc0db74a collectd: remove libip4tc dependency
Base collectd doesn't require libip4tc as stated in the collectd git:

* libiptc (optional)
For querying iptables counters
<http://netfilter.org/>

And libip4tc is already added as a dependency in the iptables plugin
because it needs it, so remove this dependency from the default collectd
to make it compatible with the new nftables firewall4 (by not selecting
any iptables components).

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
2022-01-26 22:34:26 +02:00
Hannu Nyman
569f3710fe miniupnpd: declare nftables variant as DEFAULT_VARIANT
Declare the nftables variant as the DEFAULT_VARIANT
as nftables firewall4 is the now default in OpenWrt.

Additionally,
 * toggle CONFLICTS placement to avoid circular dependency warning
 * use AUTORELEASE

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2022-01-26 13:11:05 -05:00
Sergey V. Lobanov
0a9a52ee77 syslog-ng: fix build on macos
configure script detects Darwin and uses flags incompatible with
Linux target build.

This patch uses fakeuname tool if host OS is MacOS to avoid Darwin
detection on target build.

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-26 16:02:58 +03:00
Sergey V. Lobanov
5a2178a344 gpsd: fix build on macos
gpsd build fails on macos due to using sys.platform in build logic.

This patch allows to redefine target platform to fix the issue.

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-25 16:27:13 -08:00
Sergey V. Lobanov
9d8171aa06 postfix: fix build on macos
macos build fails due to two reasons:
1. using build host ar and ranlib tools
2. using uname -r to get kernel version

First issue is fixed by specifying ar and ranlib from toolchain
Second issue is fixed by specifying kernel release major version=5
Using 'uname -r' from build host for cross-compiling is not a good
idea even for Linux build host

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-25 15:32:39 -08:00
Tianling Shen
ad608b5ca7 dnsproxy: Update to 0.40.6
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-01-25 15:30:38 -08:00
Peter van Dijk
c3d2311e35 pdns: update to 4.6.0
* Bump to 4.6.0
* Remove "random" backend as it is gone upstream

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2022-01-25 15:30:30 -08:00
Jan Hoffmann
948f0d29cc vnstat2: update to version 2.9
Signed-off-by: Jan Hoffmann <jan@3e8.eu>
2022-01-25 21:54:48 +01:00
Daniel Bermond
9baa761936 proxychains-ng: update to version 4.16
Maintainer: me

Build system: Arch Linux x86_64
Build tested: ipq806x/R7800
Run tested  : ipq806x/R7800

Signed-off-by: Daniel Bermond <danielbermond@gmail.com>
2022-01-25 21:54:13 +01:00
Michael Heimpold
267753b1d4
Merge pull request #17676 from mhei/php8-update
php8: update to 8.1.2
2022-01-25 21:40:04 +01:00
Alexandru Ardelean
41c2e77e6a
Merge pull request #17688 from svlobanov/stress-ng-fix-build-on-macos
stress-ng: fix build on macos
2022-01-25 12:17:33 +02:00
Josef Schlehofer
c16633dfdd
Merge pull request #17689 from BKPepe/tvheadend-conffiles
tvheadend: fix conffiles section
2022-01-25 09:00:29 +01:00
Oskari Rauta
05dcb333be crun: update to v1.4.1
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2022-01-24 15:45:16 -08:00
Oskari Rauta
e08862ba0b conmon: update to 2.0.32
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2022-01-24 15:45:01 -08:00
Hirokazu MORIKAWA
8278998e48 node: January 10th 2022 Security Releases
Update to v14.18.3

January 10th 2022 Security Releases:
Improper handling of URI Subject Alternative Names (Medium)(CVE-2021-44531)
Certificate Verification Bypass via String Injection (Medium)(CVE-2021-44532)
Incorrect handling of certificate subject and issuer fields (Medium)(CVE-2021-44533)
Prototype pollution via console.table properties (Low)(CVE-2022-21824)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-01-24 15:44:05 -08:00
Jeffery To
af341cd76e micropython: Update to 1.18, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-01-24 15:43:39 -08:00
Tianling Shen
029b37aad0 yq: Update to 4.17.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-01-24 15:43:25 -08:00
Josef Schlehofer
752d1ffc28
tvheadend: fix conffiles section
The previous one was wrong, and it did not work. It could be checked
inside compiled package in control.tar.gz that there was missing
``conffiles`` file with content `/etc/config/tvheadend`

It is also possible to verify that the config is not overwritten on the router
by running ``opkg install tvheadend --force-reinstall``

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-01-25 00:23:13 +01:00
Sergey V. Lobanov
53a51fb3d1 stress-ng: fix build on macos
This patch adds KERNEL=Linux to MAKE_FLAGS to avod Darwin detection.
If Makefile detects Darwin, it removes -lbsd from build flags, but
this flag is required due to target is always Linux, not bsd-like.

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-25 01:41:09 +03:00
Josef Schlehofer
5879260515
tvheadend: fix typo in uriparser
Fixes: 0449c109e7 ("tvheadend: disable
uriparser")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-01-24 12:25:00 +01:00
Nick Hainke
94efdcf02a wg-installer: fix multiple namespaces
Add flag "--lookup-default-namespace" to signal that wg-installer should
look already established wireguard sessions in the default namespace.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-23 00:08:32 +01:00
Michael Heimpold
ca4e6992fd php8: update to 8.1.2
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-01-22 21:48:12 +01:00
Stijn Tintel
59af1d0694
Merge pull request #17543 from stintel/vallumd
vallumd: bump to 0.2.0
2022-01-22 16:59:25 +02:00
Josef Schlehofer
e7e16d8936
Merge pull request #17665 from BKPepe/tvheadend-uriparser
tvheadend: disable uriparser
2022-01-22 14:37:30 +01:00
Tiago Gaspar
28ac3a6997 jool: remove iptables support and update templates
This commit removes iptables backend support and leaves only the
netfilter backend support. This means that:
-  iptables and nftables firewall based systems (firewall3 and firewall
4) are supported trough the netfilter instance mode
-  the iptables/xtables mode support is disabled

For more information on the modes and how to use the new netfilter
instance checkout https://www.jool.mx/en/intro-jool.html

This move is made out of the commit upstream that sets firewall4 as the
default for new default buils and based on the conversation in #16818
and was decided that the netfilter interface is the priority since
iptables support will be dropped in the foreseeable future.

While at it update the templates provided.

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
2022-01-21 18:57:02 -08:00
Josef Schlehofer
0449c109e7
tvheadend: disable uriparser
This avoids to add liburiparser as dependency.

Package tvheadend is missing dependencies for the following libraries:
liburiparser.so.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-01-21 11:06:26 +01:00
Sergey V. Lobanov
270e8eabc3 libreswan: fix build on macos
libreswan makefile detects macos (darwin) and changes build logic
but OpenWrt is always Linux so it is required to specify linux as
target platfrom

This patch specifies Linux as a target platfrom

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-20 20:49:08 -08:00
Kerma Gérald
d6b116cb43 crowdsec-firewall-bouncer: fix name in initd to start the process
crowdsec rename the binary from crowdsec-firewall-bouncer to cs-firewall-bouncer
the initd need the correct binary name to start the process
the link for github source need also to be fixed (only the information one)
fix the BuildDate
updated copyright

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-01-20 20:48:18 -08:00
Tianling Shen
de310c7ff0 dnsproxy: Update to 0.40.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-01-20 20:47:01 -08:00
Glenn Strauss
3badd76668 lighttpd: update to lighttpd 1.4.64 release hash
remove long-deprecated modules

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2022-01-20 15:21:28 -08:00
Nick Hainke
fab86eb626 wg-installer: remove unused dependency
Remove the dependency "coreutils-realpath" from
wg-installer-server-hotplug-olsrd.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-20 15:56:02 +01:00
Nick Hainke
324fa79d7c wg-installer: create wireguard key if it does not exist
Check if the key exists which is given by
    option wg_key '/etc/wgserver/wg.key'

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-20 14:44:26 +01:00
Nick Hainke
432a965689 wg-installer: install cronjob
Install a cronjob that removes unused wireguard interfaces every 10
minutes.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-20 09:51:05 +01:00
Nick Hainke
da48bc3792 wg-installer: check if a key is already inserted
Check if a peer is already existing with a given public key. Introduce a
response code for signaling why the server rejected the request.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-20 09:19:04 +01:00
Nick Hainke
69c81790d1 wg-installer: rework code
Use shellcheck to rework the code. Use "export" to return variables from
a function call. Further, fix typos.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-01-20 02:04:50 +01:00
Peter van Dijk
8ca0439f97 dnsdist: update to 1.7.0
* bump to 1.7.0
* add outgoing DNS over HTTPS support, using new dependency nghttp2

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2022-01-19 13:27:16 -08:00
Peter van Dijk
9e3d0bdd82 pdns-recursor: update to 4.6.0
* bump to 4.7.0
* enable DNS over TLS (uses libssl which was already a dependency)
* add libcurl dependency for new zone-to-cache feature.

Co-Authored-By: wout@wbnet.eu
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2022-01-19 13:27:03 -08:00
Sergey V. Lobanov
d60a7ccedc ola: fix build on macos
Latest Apple clang (v13) defines __cplusplus=199711 by default, but
protobuf requires at least 201103 (c++11)

Backported patch to fix c++ detection:
30fe936a88

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-19 11:25:15 -08:00
Lucian Cristian
a1cdf51ba8 frr: update to latest
also fix mips compile

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2022-01-18 21:29:39 -08:00