Commit Graph

25827 Commits

Author SHA1 Message Date
Eneas U de Queiroz d5226e1e6f ntfs-3g: update config's help syntax
Change ---help--- to plain 'help' in Package/ntfs-3g/config, as newer
versions of kconfig have removed the command's older name.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2021-10-28 16:08:24 -07:00
Philip Prindeville a11d34617a
Merge pull request #16992 from pprindeville/named-restart-intf-flap
bind: detect new interfaces when they come up
2021-10-28 17:01:14 -06:00
Philip Prindeville 24e346e20b
Merge pull request #16984 from pprindeville/strongswan-update-5.9.4
strongswan: bump version to 5.9.4
2021-10-28 16:57:51 -06:00
Philip Prindeville 26bef5067c
Merge pull request #17010 from pprindeville/bind-update-9.17.19
bind: Bump to 9.17.19
2021-10-28 16:56:31 -06:00
Philip Prindeville c2de702cbd bind: Bump to 9.17.19
The following CVE updates are included:

* CVE-2021-25219: The "lame-ttl" option is now forcibly set to 0. This
  effectively disables the lame server cache, as it could previously be
  abused by an attacker to significantly degrade resolver performance.

* CVE-2021-25218: An assertion failure occurred when named attempted
  to send a UDP packet that exceeded the MTU size, if Response Rate
  Limiting (RRL) was enabled.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-10-28 14:06:07 -06:00
Philip Prindeville 049b25bcf9 bind: detect new interfaces when they come up
Reload the service when interfaces flap; note that libcap support
is required to open new sockets on interfaces coming up during
a reload, otherwise a full restart would be needed.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-10-28 14:00:43 -06:00
Philip Prindeville 3ea87e6401
Merge pull request #17003 from pprindeville/named-deprecate-managed-keys
bind: deprecate managed-keys
2021-10-28 13:54:40 -06:00
Philip Prindeville f7d11c9a1c strongswan: Bump to 5.9.4
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-10-28 13:04:40 -06:00
Daniel Golle 025bca81a0 nfs-kernel-server: reload when exported mountpoints show
Use newly introduced procd_add_reload_mount_trigger to reload nfsd
when a mountpoint covering an exported filesystem is added by blockd.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-10-28 19:54:29 +01:00
Daniel Golle c3c6a2ff1d
gnunet: several improvements
Fix uci-defaults for PostgreSQL backends
Add user 'gnunet' to 'postgres' group
Always build with sqlite3 as configure fails when --without-sqlite

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-10-28 16:31:44 +01:00
Ren Zongjia 1a5d35dd7b transmission: update seccomp config file
Add missing syscalls found using utrace.

Signed-off-by: Ren Zongjia <acooler15@foxmail.com>
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-10-28 16:31:30 +01:00
Jan Hoffmann f9ea814260 vnstat2: add hotplug script for adding interfaces
If an interface doesn't exist yet when vnStat is started, it won't be
monitored, as only existing interfaces can be added to the database via
the vnstat command.

This adds a hotplug script which adds any configured interfaces to the
vnStat database when it goes up.

Signed-off-by: Jan Hoffmann <jan@3e8.eu>
2021-10-28 01:31:18 -07:00
Jan Hoffmann ecae7dedde vnstat2: fix all interfaces being monitored when none are configured
By default, vnstatd adds all available interfaces on startup when its
database is empty. The --noadd option prevents this, but it breaks
import of legacy databases, and causes vnstatd to exit immediately
after startup, which breaks reloading.

This changes the init script to add the --noadd option when no legacy
databases need to be imported, and patches vnstatd to keep running
even when no interfaces are configured.

Signed-off-by: Jan Hoffmann <jan@3e8.eu>
2021-10-28 01:31:18 -07:00
Huangbin Zhan c1f4273501 nginx-util: add conffiles
Add /etc/config/nginx, restrict_locally, uci.conf.template
 as conffile

Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
2021-10-27 23:18:42 -07:00
Huangbin Zhan e56930a8fc rosy-file-server: fix conffile name
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
2021-10-27 23:18:42 -07:00
Huangbin Zhan 1c3600ca68 uradvd: fix installed filename, add conffiles
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
2021-10-27 23:18:42 -07:00
Huangbin Zhan 94d57346fc treewide: add missing conffiles
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
2021-10-27 23:18:42 -07:00
Huangbin Zhan 3d66be4203 atftpd: fix conffiles
Add missing conffiles
Fix conffile permission

Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
2021-10-27 23:18:42 -07:00
Huangbin Zhan e6e770b268 treewide: fix broken conffiles
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
2021-10-27 23:18:42 -07:00
Nick Hainke efaa971914 gpsd: update to 3.23.1
3.23.1: 2021-09-21
  Improve ubx cycle detection.
  Add quirks for Jackson Labs nonstandard NMEA
  Change STATUS_NO_FIX to STATUS_UNK to avoid confusion with fix mode.
  Change STATUS_FIX to STATUS_GPS to avoid confusion with fix mode.
  Change STATUS_DGPS_FIX to STATUS_DGPS to avoid confusion with fix mode.
  Split SOURCE_ACM from SOURCE_USB.  ACM has no speeds.
  Add speeds 1 mbps, 1.152 mbps, 1.5 mbps, and higher.  When libc supports them.
  Improve autobaud.
  Add new u-blox M10 messages.
  Fix u-blox M6, M7 initialization issues.
  Various ubxtool and gpxlogger updates.
  Add mtk3301_speed_switcher()
  No API changes, except for STATUS_* as above.
  No ABI changes.
  Fallback to "python3" if "python" not found.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2021-10-27 23:16:09 -07:00
Rosen Penev 164bd1fdf8 acsccid: fix compilation under macOS
uname is not safe for cross compilation.

Also fixed up download file name to avoid potential conflicts.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-10-27 23:14:31 -07:00
Philip Prindeville a39a8372b3 bind: deprecate managed-keys
This has been replaced with the "trust-anchors" keyword, per
section 8.21.1 New Features of the Bind 9 Administrator Reference
Manual:

• In order to clarify the configuration of DNSSEC keys, the trusted-keys and managed-keys statements have been deprecated, and the new trust-anchors statement should now be used for both types of key.
  When used with the keyword initial-key, trust-anchors has the same behavior as managed-keys, i.e., it configures a trust anchor that is to be maintained via RFC 5011.
  When used with the new keyword static-key, trust-anchors has the same behavior as trusted-keys, i.e., it configures a permanent trust anchor that will not automatically be updated. (This usage is not recommended for the root key.) [GL #6]

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-10-27 21:49:31 -06:00
Martin Schneider 4fde0fdad5 boringssl: Add boringssl library
Add boringssl library. BoringSSL is Google's fork of OpenSSL.
Amongst other features, it adds support for QUIC.

Signed-off-by: Martin Schneider <martschneider@google.com>
2021-10-27 18:09:24 -07:00
Alexandru Ardelean 784f2a519b python-paho-mqtt: bump to version 1.6.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-10-27 20:56:05 +03:00
Alexandru Ardelean 52aadf9579 numpy: bump to version 1.21.3
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-10-27 20:56:05 +03:00
Alexandru Ardelean 179358efbf mstpd: bump to version 0.1.0
And switch to AUTORELEASE for PKG_RELEASE.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-10-27 20:55:38 +03:00
Alexandru Ardelean 811bd772b7 stress-ng: bump to version 0.13.05
And switch to Github URLs.
The old one isn't working anymore.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-10-27 20:55:22 +03:00
Florian Eckert 9301cf124a
Merge pull request #16936 from aleksander0m/aleksander/mm-wwan-subsystem
modemmanager: add support for wwan subsystem in hotplug
2021-10-27 14:16:18 +02:00
Tianling Shen 92ee2a3cbb dnsproxy: Update to 0.39.9
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-10-26 23:04:11 -07:00
Vladimir Ulrich 3185feda49 zoneinfo: Updated to the latest release
Signed-off-by: Vladimir Ulrich <admin@evl.su>
2021-10-26 11:15:41 -07:00
Sebastian Kemper 83d1cdaf3f apache: fixup apxs
apxs is used to get information about the apache installation when
building external modules. Currently there are issues:

1.

./staging_dir/target-mips_24kc_musl/usr/bin/apxs -q TARGET
apache2
apxs:Error: ./staging_dir/target-mips_24kc_musl/home/sk/tmp/openwrt/staging_dir/target-mips_24kc_musl/usr/bin/apr-1-config not found!.

This error is fixed by sed script #2.

2.

./staging_dir/target-mips_24kc_musl/usr/bin/apxs -q TARGET
cannot open ./staging_dir/target-mips_24kc_musl/home/sk/tmp/openwrt/staging_dir/target-mips_24kc_musl/usr/share/apache2/build/config_vars.mk: No such file or directory at ./staging_dir/target-mips_24kc_musl/usr/bin/apxs line 213.

This error is fixed by sed scipt #1.

Both sed scripts taken from buildroot (see [1]).

[1] https://github.com/buildroot/buildroot/blob/master/package/apache/apache.mk

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2021-10-26 09:39:53 -07:00
Sebastian Kemper da4b1ca8d6 apache: security bump to 2.4.51
Fixes (see [1] for details):

  CVE-2021-33193
  CVE-2021-41524
  CVE-2021-41773
  CVE-2021-42013

[1] https://httpd.apache.org/security/vulnerabilities_24.html

Patch 020-openssl-deprecated.patch refreshed.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2021-10-26 09:39:53 -07:00
Nick Hainke 8b7fb614dd dawn: set symm_enc default to 0
User mpeleshenko reported that symm encryption breaks hearing map.
Set the default to 0.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2021-10-26 17:52:49 +02:00
Nick Hainke 2e02deb5a9 dawn: update to 2021-10-26
ddc007e32ced ubus: avoid use after free in handle_probe_req()
e1275713c057 github: fix workflow

Signed-off-by: Nick Hainke <vincent@systemli.org>
2021-10-26 00:37:56 +02:00
Jan Pavlinec 766a5b285e redis: update to version 6.2.6
Fixes:
- CVE-2021-41099
- CVE-2021-32762
- CVE-2021-32687
- CVE-2021-32675
- CVE-2021-32672
- CVE-2021-32628
- CVE-2021-32627
- CVE-2021-32626

Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>
2021-10-25 08:34:57 -07:00
Jan Hák 175087bf25 knot: update to version 3.1.3
Signed-off-by: Jan Hák <jan.hak@nic.cz>
2021-10-25 08:34:35 -07:00
Rosen Penev 8a42b541d4 zstd: update to 1.5.0
Remove uClibc hack. uClibc is not in the tree anymore.

Update configure options. Change legacy_level to 7. This gets rid of
backwards compatibility with version 0.1 and bumps it to 0.7.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-10-24 17:52:20 -07:00
Rosen Penev f19a93bf5e fuse-overlayfs: update to 1.7.1
Rearrange Makefile for consistency between packages.

Add m4 patch to fix compilation under some systems.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-10-24 17:48:45 -07:00
Rosen Penev 62a91f3299 grilo-plugins: update to 0.3.14
Fix wrong option names. Removed vimeo following upstream.

Fixed license information.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-10-24 17:48:07 -07:00
Rosen Penev 5bee2f45fe grilo: update to 0.3.14
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-10-24 17:48:07 -07:00
David Bauer 737b4fef25 usteer: add package
This commits adds the new usteer package to the packages feed.

usteer is a daemon for steering wireless clients across frequency
bands as well as between multiple access points on a network.

Signed-off-by: David Bauer <mail@david-bauer.net>
2021-10-24 23:48:04 +02:00
Michael Heimpold 495caf5880
Merge pull request #16960 from neheb/3
libxml2: don't build host shared libraries
2021-10-24 22:06:09 +02:00
Nick Hainke 5dd6c8ad46 bossa: add bossa
Based on the work of Hirokazu MORIKAWA (nxhack):
https://github.com/nxhack/openwrt-arduino-packages/tree/master/bossa

BOSSA is a flash programming utility for Atmel's SAM family of
flash-based ARM microcontrollers. The motivation behind BOSSA is to
create a simple, easy-to-use, open source utility to replace Atmel's
SAM-BA software.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2021-10-23 20:52:30 -10:00
Rosen Penev dc701d61b9 libxml2: don't build host shared libraries
Avoids having to add

HOST_LDFLAGS: -Wl,-rpath,$(STAGING_DIR_HOSTPKG)/lib

for packages that rely on shared libraries.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-10-23 17:03:12 -07:00
Bjørn Mork 4160ba8725 dosfstools: fix AM_ICONV triggered build error
Fix this build error:

 gcc -Wall -Wextra -Wno-sign-compare -Wno-missing-field-initializers \
  -Wmissing-prototypes -Wstrict-prototypes -Wwrite-strings -O2 \
  -I/usr/local/src/openwrt/staging_dir/host/include \
  -L/usr/local/src/openwrt/staging_dir/host/lib \
  -o fsck.fat check.o file.o fsck.fat.o lfn.o boot.o common.o fat.o io.o \
  charconv.o @LIBICONV@
 gcc: error: LIBICONV@: No such file or directory
 make[4]: *** [Makefile:449: fsck.fat] Error 1

Suggested-by: Rosen Penev <rosenp@gmail.com>
Signed-off-by: Bjørn Mork <bjorn@mork.no>
2021-10-23 11:48:41 -07:00
Nikos Mavrogiannopoulos 91c1b3d18d
Merge pull request #16949 from neheb/10
libtasn1: don't build host shared libs
2021-10-23 20:31:06 +02:00
Michael Heimpold be8539156d
Merge pull request #16958 from mhei/php7-update
php7: update to 7.4.25
2021-10-23 12:54:22 +02:00
Michael Heimpold 84ac4fc9e0
Merge pull request #16957 from mhei/php8-update
php8: update to 8.0.12
2021-10-23 12:54:08 +02:00
Florian Eckert 03129673bc
Merge pull request #12175 from jekkos/collectd-ltq-dsl
collectd: Add collector for lantiq dsl metrics
2021-10-23 08:10:02 +02:00
Rosen Penev 2b36a1b59f libnpupnp: update to 4.1.5
Add libmicrohttpd to PKG_BUILD_DEPENDS as it doesn't get added for some
reason.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-10-22 22:59:24 -07:00