Commit Graph

19601 Commits

Author SHA1 Message Date
Jeffery To 2b8f9b7349 golang: Update to 1.14.3
This also removes a (useless) test for PKG_GO_ZBOOTSTRAP_MODS (it is
always non-empty).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-17 03:37:45 +08:00
Rosen Penev 7235ec41c3
Merge pull request #12181 from micmac1/apa-suid
apache: tighten log dir + suEXEC
2020-05-16 12:26:09 -07:00
Hannu Nyman ca408508d5
Merge pull request #12186 from lucize/nsslto
nss: revert -flto change
2020-05-16 21:30:37 +03:00
Lucian Cristian 630c19f648 nss: revert -flto change
it seems that it can lead to segfault in libfreebl3.so

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-16 21:06:53 +03:00
Sebastian Kemper 07db6b4a39 apache: revisit suEXEC setup
When adding suEXEC to the apache package, Alpine's package [1] served as
a template. Not enough attention was paid to the details.

Alpine uses a different layout. So for OpenWrt to use /var/www as
DocumentRoot does not make sense. /var is also volatile on OpenWrt. This
commit removes the configure argument. The default is htdocsdir.

This also does away with uidmin/gidmin 99. The default is 100, which is
fine.

Finally, the suexec binary is moved from /usr/sbin to
/usr/lib/apache2/suexec_dir. Upstream recommends installing suexec with
"4750" (see [2]) and the group set to the user's group. While that would
be possible, it would cause a few headaches on OpenWrt. The group would
need to be changed first in a post-install script and a call to chmod
would need to be made afterward, to make the binary SUID again.

It's easier to hide the SUID binary away from others in a directory.
This way we don't need to use chmod in the post-install script.

[1] https://github.com/alpinelinux/aports/tree/master/main/apache2
[2] https://httpd.apache.org/docs/2.4/suexec.html

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-16 14:47:37 +02:00
Lucian Cristian 16ecc549f1 libcap-ng: add package libcap-ng
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-16 15:28:52 +03:00
Sebastian Kemper dbaad2fa44 apache: create log directory o=
Hides away the contents of the log directory from others.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-16 14:24:05 +02:00
Michael Heimpold 04575c258e php7-pecl-redis: update to 5.2.2
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-05-16 14:09:51 +02:00
Michael Heimpold ceb660cc61 php7: update to 7.4.6
This fixes:
  - CVE-2019-11048

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-05-16 13:56:33 +02:00
Hannu Nyman 909f4c6638
Merge pull request #12179 from wvdakker/master
Shorewall: Bump to 5.2.4.5
2020-05-16 11:58:13 +03:00
W. van den Akker fbed8ff1e7
Shorewall6: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-16 10:35:30 +02:00
W. van den Akker 49a930dae6
Shorewall: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-16 10:34:21 +02:00
W. van den Akker 10afa55dfb
Shorewall6-lite: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-16 10:33:12 +02:00
W. van den Akker 3a61f1244d
Shorewall-lite: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-16 10:32:11 +02:00
W. van den Akker fba9ad6c3b
Shorewall-core: Bump to 5.2.4.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-05-16 10:31:02 +02:00
Rosen Penev 9f4cde559c
Merge pull request #12167 from lucize/nsslto
nss: add -flto and makefile cleanup
2020-05-15 12:55:33 -07:00
Rosen Penev a85753f2e4
Merge pull request #12166 from lucize/nsprlto
nspr: nspr add -flto to compile
2020-05-15 12:55:16 -07:00
Rosen Penev 1efe4cf4a1
Merge pull request #12170 from kagurazakakotori/open-vm-tools
open-vm-tools: bump to version 11.1.0
2020-05-15 12:53:01 -07:00
Lucian Cristian 47570b4cf5 nss: add -flto and makefile cleanup
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-15 16:28:23 +03:00
Lucian Cristian df7392149c nspr: nspr add -flto to compile
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-15 10:29:23 +03:00
Rosen Penev 66c94cd4e9
Merge pull request #12168 from lucize/libreswup
libreswan: update to 3.32
2020-05-14 20:45:37 -07:00
Rosen Penev c732b9358c
Merge pull request #12172 from rs/nextdns-1.5.8-master
nextdns: Update to version 1.5.8
2020-05-14 20:45:16 -07:00
Rosen Penev fbc719b3f3
Merge pull request #12162 from neheb/upnp23
npupnp updates
2020-05-14 20:44:53 -07:00
Olivier Poitrey 5d6e75743a nextdns: Update to version 1.5.8
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-05-14 23:41:01 +00:00
Rosen Penev 8302890162
Merge pull request #12149 from ja-pa/python-atomicwrites-udate
python-atomicwrites: update to version 1.4.0
2020-05-14 16:14:45 -07:00
Rosen Penev 2ad0aab050
Merge pull request #12161 from neheb/faad22
faad2: update to 2.9.2
2020-05-14 16:14:04 -07:00
Rosen Penev aee7061658
Merge pull request #12165 from jefferyto/golang-tweaks
golang: Various improvements/tweaks
2020-05-14 16:13:44 -07:00
Kagurazaka Kotori 24a12c8f28
open-vm-tools: bump to version 11.1.0
Signed-off-by: Kagurazaka Kotori <kagurazakakotori@gmail.com>
2020-05-15 02:30:46 +08:00
Rosen Penev d9328d42bd
Merge pull request #12130 from jefferyto/python3-find-stdlib-depends
python3: Add script to help find standard library dependencies
2020-05-14 09:06:30 -07:00
Jeffery To d4d78c2511 python3: Add script to help find standard library dependencies
This adds a script that searches a Python package's source code to find
imports for separately-packaged standard library modules.

The script can be run by calling make with the configure target and
"PY3=stdlib V=s" arguments, e.g.

    make package/python3-lxml/configure PY3=stdlib V=s

This also updates the readme on how to call this script, as well as more
information on Python package dependencies in general.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-14 23:38:24 +08:00
Lucian Cristian 7d969ca3e1 libreswan: update to 3.32
also add -flto to compiler flags

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-05-14 16:32:10 +03:00
Jeffery To da3fb97b9c golang: Set/reset default platform options for target Go compiler
Because the first stage for building target Go is actually a host build,
the default platform options (GO386, GOARM, etc.) are detected from the
host. These values are written to a source file and kept when building
the second stage.

This modifies this source file to set the appropriate values for the
target platform, and reset values for other platforms to their
cross-compiling / most compatible defaults.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-14 17:45:18 +08:00
Rosen Penev a22fff844d
Merge pull request #9865 from peter-stadler/etesync
etesync-server: add package and configuration for running with uwsgi on nginx [RFC]
2020-05-14 00:24:59 -07:00
Peter Stadler 62609f1587 nginx: do not reduce max processes
Use the upstream value for NGX_MAX_PROCESSES (=1024) again.
So it is safe to use `worker_processes auto;` (which sets it to
the number of CPUs). Also use this directive in the conf instead
of calculating the number in the init and passing it as argument.

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2020-05-14 09:19:45 +02:00
Rosen Penev ba2c714aa8
Merge pull request #12075 from ja-pa/redis-update
redis: update to version 6.0.1
2020-05-13 16:33:16 -07:00
Rosen Penev 2d7fcf3893
Merge pull request #12140 from neheb/ger
gerbera: set config file to 600 permissions
2020-05-13 16:32:46 -07:00
Rosen Penev df99a7c712
gerbera: set config file to 600 permissions
Only gerbera needs to read the file.

Added config file to conffiles to fix opkg update support.

Added several extra options to the UCI config. Manual editing is still required.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-13 16:32:30 -07:00
Jan Pavlinec 00eb395c3f
redis: update to version 6.0.1
Note:
add explicit -latomic on 32-bit MIPS because 32-bit MIPS is not able to perform 64-bit atomics in hardware

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-05-14 00:27:48 +02:00
Rosen Penev 6b44750ee3
upmpdcli: update to 1.4.9
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-13 15:26:45 -07:00
Rosen Penev 1546a63414
libupnpp: update to 0.19.1
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-13 15:26:45 -07:00
Rosen Penev 724ec0659f
libnpupnp: update to 4.0.3
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-13 15:26:45 -07:00
Rosen Penev ad1203ebb9
faad2: update to 2.9.2
Removed upstreamed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-13 15:25:23 -07:00
Rosen Penev 355d2b7bef
Merge pull request #12060 from looklookson/master
sslh: Add http probe support
2020-05-13 15:22:38 -07:00
Rosen Penev 0a4ed5845a
Merge pull request #11528 from hroo/lvm2_at_preinit
lvm2: Added script and updated Makefile to activate lvm2 at preinit t…
2020-05-13 14:58:20 -07:00
Rosen Penev 5f1c9e3c94
Merge pull request #11964 from zhanhb/nginx-all-module
nginx: update all-module configurations
2020-05-13 14:56:58 -07:00
Rosen Penev f1b445963b
Merge pull request #11981 from zhanhb/conffiles
treewide: add conffiles
2020-05-13 14:44:35 -07:00
Rosen Penev d5c68c9e35
Merge pull request #12037 from olek210/coremark
coremark: Add coremark package
2020-05-13 14:41:55 -07:00
Rosen Penev f7554197c2
Merge pull request #12104 from stintel/readsb
readsb: new package
2020-05-13 14:41:11 -07:00
Rosen Penev edff5dffaa
Merge pull request #12146 from kobboi/master
ifstat: make dependency on libnetsnmp conditional
2020-05-13 14:39:52 -07:00
Rosen Penev 3224aace8a
Merge pull request #12147 from micmac1/my_up
mariadb: updates for config, auth-pam and init
2020-05-13 14:20:15 -07:00