Daniel Engberg [Thu, 19 Dec 2019 19:24:42 +0000 (20:24 +0100)]
Merge pull request #10828 from BKPepe/netdata
netdata: Update to version 1.19.0
Rosen Penev [Thu, 19 Dec 2019 18:33:33 +0000 (10:33 -0800)]
Merge pull request #10825 from BKPepe/meson-update
meson: Update to version 0.52.1
Rosen Penev [Thu, 19 Dec 2019 18:31:59 +0000 (10:31 -0800)]
Merge pull request #10818 from Cynerd/shadow-default-encryption-method
shadow: change default encryption method from DES to SHA512
Stijn Tintel [Thu, 19 Dec 2019 18:04:38 +0000 (20:04 +0200)]
net-snmp: do not exit if files cannot be opened
If snmpd fails to open files, like /dev/kmem or /dev/mem, it exits.
Avoid this by adding the -r argument.
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
Josef Schlehofer [Wed, 18 Dec 2019 21:46:02 +0000 (22:46 +0100)]
btrfs-progs: Update to version 5.4
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Luiz Angelo Daros de Luca [Thu, 19 Dec 2019 05:09:39 +0000 (02:09 -0300)]
ruby: openssl requires digest
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
Rosen Penev [Thu, 19 Dec 2019 00:18:45 +0000 (16:18 -0800)]
Merge pull request #10061 from ynezz/upstream/service-status-fix
treewide: fix service status
Rosen Penev [Thu, 19 Dec 2019 00:10:33 +0000 (16:10 -0800)]
Merge pull request #10781 from Andy2244/samba-4.11-python3-new
samba4: update to 4.11.4 (python3 version), add rpcsvc-proto, add libasn1 host build
Rosen Penev [Thu, 19 Dec 2019 00:09:35 +0000 (16:09 -0800)]
Merge pull request #10813 from EricLuehrsen/unbound_196
unbound: update to 1.9.6
Rosen Penev [Wed, 18 Dec 2019 23:59:27 +0000 (15:59 -0800)]
Merge pull request #10785 from neheb/apple
[WIP]Add idevicerestore
Rosen Penev [Wed, 18 Dec 2019 23:58:14 +0000 (15:58 -0800)]
Merge pull request #10826 from BKPepe/urllib
python-urllib3: Update to version 1.25.7
Rosen Penev [Wed, 18 Dec 2019 23:58:01 +0000 (15:58 -0800)]
Merge pull request #10827 from BKPepe/syslog
syslog-ng: Update to version 3.25.1
Rosen Penev [Wed, 18 Dec 2019 23:56:17 +0000 (15:56 -0800)]
Merge pull request #10821 from cshoredaniel/pr-remove-msmtp-scripts
msmtp-scripts: Remove as abandoning upstream; msmtp-queue works
Daniel Golle [Wed, 18 Dec 2019 21:32:06 +0000 (23:32 +0200)]
gnunet: revert accidentally committed version bump
0.12.0 tarballs aren't out yet, I accidentally committed the changed
version in commit
b6a9bd3bf3a748bda8272eb639f0ea8a7fd8c57c
("gnurl: update to version 7.67.0").
Revert gnunet back to 0.11.8.
Reported-by: Sebastian Kemper <sebastian_ml@gmx.net>
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Josef Schlehofer [Wed, 18 Dec 2019 21:05:33 +0000 (22:05 +0100)]
netdata: Update to version 1.19.0
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Josef Schlehofer [Wed, 18 Dec 2019 20:46:05 +0000 (21:46 +0100)]
python-urllib3: Update to version 1.25.7
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Josef Schlehofer [Wed, 18 Dec 2019 20:44:34 +0000 (21:44 +0100)]
syslog-ng: Update to version 3.25.1
Bump version in config
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Nikos Mavrogiannopoulos [Wed, 18 Dec 2019 20:24:45 +0000 (21:24 +0100)]
vpnc-script: bumped release version
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Nikos Mavrogiannopoulos [Wed, 18 Dec 2019 20:21:37 +0000 (21:21 +0100)]
vpnc-script: enable reconnect
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Michael Heimpold [Wed, 18 Dec 2019 19:57:14 +0000 (20:57 +0100)]
php7: update to 7.2.26
This fixes:
- CVE-2019-11046
- CVE-2019-11044
- CVE-2019-11045
- CVE-2019-11050
- CVE-2019-11047
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
Rosen Penev [Wed, 18 Dec 2019 15:12:35 +0000 (07:12 -0800)]
Merge pull request #10819 from ja-pa/lmdb-fix-ar
lmdb: use toolchain AR for compilation
Daniel F. Dickinson [Wed, 18 Dec 2019 12:33:53 +0000 (07:33 -0500)]
msmtp-scripts: Remove as abandoning upstream; msmtp-queue works
I am upstream for msmtp-scripts and have decided to abandon the project. Therefore
remove msmtp-scripts from OpenWrt -- there is already msmtp-queue which is 'good enough'
for the use cases where msmtp-scripts had any relevance.
Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
Jan Pavlinec [Wed, 18 Dec 2019 10:57:53 +0000 (11:57 +0100)]
lmdb: use toolchain AR for compilation
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
Karel Kočí [Mon, 13 May 2019 11:38:04 +0000 (13:38 +0200)]
shadow: change default encryption method from DES to SHA512
Busybox in default uses SHA512 as well.
On big ditribution this default is sourced from PAM. That means that
shadow reads pam settings and uses that. OpenWrt in most cases does not
have PAM installed and in such case shadow fallbacks to its own default
which is DES. This just changes that default to SHA512 which is
consistent with rest of the system.
Signed-off-by: Karel Kočí <karel.koci@nic.cz>
Jo-Philipp Wich [Wed, 18 Dec 2019 08:32:38 +0000 (09:32 +0100)]
cgi-io: close pipe descriptors early
In the command read side, close the superfluous write end of the pipe
early to ensure that EOF is reliably detected. Without that change, splice
calls to read from the pipe will occasionally hang until the CGI process
is eventually killed due to timeout.
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Eric Luehrsen [Wed, 18 Dec 2019 05:06:26 +0000 (00:06 -0500)]
unbound: update to 1.9.6
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
Hannu Nyman [Wed, 18 Dec 2019 05:41:42 +0000 (07:41 +0200)]
Merge pull request #10754 from stangri/master-https-dns-proxy
https-dns-proxy: switch to https-dns-proxy package name
Stan Grishin [Tue, 10 Dec 2019 22:48:45 +0000 (15:48 -0700)]
https-dns-proxy: switch to https-dns-proxy package name
Signed-off-by: Stan Grishin <stangri@melmac.net>
Rosen Penev [Tue, 17 Dec 2019 20:59:46 +0000 (12:59 -0800)]
Merge pull request #10810 from tru7/knxd
knxd: adjust startup files to better comply with procd
Michael Heimpold [Tue, 17 Dec 2019 19:28:57 +0000 (20:28 +0100)]
Merge pull request #10806 from micmac1/libzip-fts
libzip: fix musl-fts failure
Rosen Penev [Tue, 17 Dec 2019 16:50:19 +0000 (08:50 -0800)]
Merge pull request #10804 from br101/pingcheck-update
pingcheck: Update to latest version
Othmar Truniger [Tue, 17 Dec 2019 14:49:15 +0000 (15:49 +0100)]
knxd: adjust startup files to better comply with procd
Signed-off-by: Othmar Truniger <github@truniger.ch>
Bruno Randolf [Mon, 16 Dec 2019 13:46:09 +0000 (13:46 +0000)]
pingcheck: Update to latest version
Signed-off-by: Bruno Randolf <br1@einfach.org>
Andy Walsh [Fri, 13 Dec 2019 16:22:33 +0000 (17:22 +0100)]
samba4: update to 4.11.4
* update to 4.11.4 (python3 version)
* re-enable AD-DC option
* add 'samba_nice' UCI option via "config procd 'extra'"
* restructure buildsteps (don't rely on waf --targets logic)
* move quota option into VFS
* move ACL option into AC-DC
* add more admin-tools
* use rpath_install for libs
* fix rpath + rstrip
Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
Rosen Penev [Tue, 17 Dec 2019 06:00:18 +0000 (22:00 -0800)]
Merge pull request #10778 from bobafetthotmail/minidlna-fix
minidlna: add static uuid in config
Rosen Penev [Tue, 17 Dec 2019 05:58:05 +0000 (21:58 -0800)]
Merge pull request #10795 from neheb/l
lua-rs232: Update to latest master
Sebastian Kemper [Mon, 16 Dec 2019 22:33:30 +0000 (23:33 +0100)]
libzip: fix musl-fts failure
musl doesn't support fts. But with the extra package musl-fts installed,
libzip picks up the fts header and fails at the linking stage:
zipcmp.c:(.text.startup+0x130): undefined reference to `fts_open'
/home/sk/tmp/openwrt/staging_dir/toolchain-mips_24kc_gcc-8.3.0_musl/lib/gcc/mips-openwrt-linux-musl/8.3.0/../../../../mips-openwrt-linux-musl/bin/ld: zipcmp.c:(.text.startup+0x172): undefined reference to `fts_read'
So with musl-fts we need to link in libfts. To address that this commits
patches the cmake setup to check if fts is available in libc itself or
in any external libfts.
So when musl-fts is installed on the system the setup will be the
following:
musl: use libfts
uclibc: use fts from libc
glibc: like uclibc
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
Rosen Penev [Sun, 15 Dec 2019 03:09:43 +0000 (19:09 -0800)]
lua-rs232: Update to latest master
Should fix the no previous prototype errors.
Also fixed the install paths. Now running this should be correct.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Mon, 16 Dec 2019 20:42:45 +0000 (12:42 -0800)]
libplist: Several fixes
Add myself as maintainer.
Add PKG_CPE_ID.
Switch to submenu for easier readability.
Change libplist-utils name to the utility.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Mon, 16 Dec 2019 20:37:50 +0000 (12:37 -0800)]
libusbmuxd: Several fixes
Add myself as maintainer.
Add PKG_CPE_ID.
Add submenu for easier readability.
Install extra tool.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Sat, 14 Dec 2019 22:42:36 +0000 (14:42 -0800)]
usbmuxd: Update to latest master
usbmuxd must be ran for many of the idevice tools. Added an init
script to make this easier.
Added myself as maintainer.
Fix PKG_CVE_ID.
Added config directory.
Placed in a submenu for easier readability.
Add extra tool
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Sat, 14 Dec 2019 07:00:06 +0000 (23:00 -0800)]
idevicerestore: Add package
Allows to flash an iOS device without using iTunes.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Sat, 14 Dec 2019 06:37:34 +0000 (22:37 -0800)]
libirecovery: Add package
Needed for idevicerestore
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Sat, 14 Dec 2019 05:53:01 +0000 (21:53 -0800)]
libimobiledevice: Update to latest master
Added patch to fix Wformat warning.
Fixed license information.
Removed outdated iconv dependency
Placed in a submenu for readability.
Added myself as maintainer.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Mon, 16 Dec 2019 16:19:17 +0000 (08:19 -0800)]
Merge pull request #10805 from mmtj/pyroute2-0.5.7
python3-pyroute2: Update to version 0.5.7
Rosen Penev [Mon, 16 Dec 2019 15:53:05 +0000 (07:53 -0800)]
Merge pull request #10800 from gladiac1337/haproxy-2.0.11
haproxy: Update HAProxy to v2.0.11
Rosen Penev [Mon, 16 Dec 2019 15:52:31 +0000 (07:52 -0800)]
Merge pull request #10803 from Payne-X6/master
knot: update to version 2.9.2
Martin Matějek [Mon, 16 Dec 2019 15:35:49 +0000 (16:35 +0100)]
python3-pyroute2: Update to version 0.5.7
Signed-off-by: Martin Matějek <martin.matejek@gmx.com>
Josef Schlehofer [Sun, 15 Dec 2019 23:21:35 +0000 (00:21 +0100)]
meson: Update to version 0.52.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Jan Hak [Mon, 16 Dec 2019 12:56:39 +0000 (13:56 +0100)]
knot: update to version 2.9.2
Signed-off-by: Jan Hak <jan.hak@nic.cz>
Daniel Golle [Mon, 16 Dec 2019 07:51:52 +0000 (09:51 +0200)]
gnurl: update homepage URL and use @GNU mirrors
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Rosen Penev [Mon, 16 Dec 2019 05:37:46 +0000 (21:37 -0800)]
Merge pull request #10793 from micmac1/dnsdist-no-bomb
dnsdist: fix various build failures
Rosen Penev [Mon, 16 Dec 2019 05:02:22 +0000 (21:02 -0800)]
Merge pull request #10794 from mhei/add-libconfig
libzip: add package
Yousong Zhou [Mon, 16 Dec 2019 02:49:30 +0000 (02:49 +0000)]
qemu: bump to version 4.2.0
Daniel Engberg [Sun, 15 Dec 2019 22:22:40 +0000 (23:22 +0100)]
Merge pull request #10798 from Andy2244/wsdd2-(2019-12-14)
wsdd2: update to git (2019-12-15), bind to 'lan' only
Alexander Couzens [Sun, 15 Dec 2019 19:46:15 +0000 (20:46 +0100)]
libmicrohttpd: update to version 0.9.69
Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
Andy Walsh [Sun, 15 Dec 2019 16:11:25 +0000 (17:11 +0100)]
wsdd2: update to git (2019-12-15), bind to 'lan' only
* update to git (2019-12-15)
* bind to 'lan' interface only
* make cifsd compatible (avoid testparm dependency)
* only start if needed
* add meta data (vendor, model, sku)
* update smb.conf procd location
* lower restart delay
* remove outdated patch
Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
Daniel Golle [Sun, 15 Dec 2019 17:35:53 +0000 (19:35 +0200)]
gnurl: update to version 7.67.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Christian Lachner [Sun, 15 Dec 2019 12:47:37 +0000 (13:47 +0100)]
haproxy: Update HAProxy to v2.0.11
- Update haproxy download URL and hash
- Remove obsolete patches
Signed-off-by: Christian Lachner <gladiac@gmail.com>
Michael Heimpold [Mon, 2 Dec 2019 23:07:42 +0000 (00:07 +0100)]
libzip: add package
This introduces libzip which is e.g. a dependency for upcoming upgrade
of PHP to version 7.4.
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
Sebastian Kemper [Sun, 15 Dec 2019 09:51:12 +0000 (10:51 +0100)]
postfix: update tinycdb dependency
tinycdb now installs a shared lib alongside the static archive. postfix
will use the shared lib, hence this commit updates the dependency.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
Sebastian Kemper [Sun, 15 Dec 2019 09:49:20 +0000 (10:49 +0100)]
dnsdist: add dependency on tinycdb
If libcdb from tinycdb is available dnsdist will link to it. This commit
adds the dependency.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
Sebastian Kemper [Sun, 15 Dec 2019 09:44:05 +0000 (10:44 +0100)]
tinycdb: install shared lib and pic archive
dnsdist picks up cdb.h but can't link in the static archive.
/home/sk/tmp/openwrt/staging_dir/toolchain-mips_24kc_gcc-8.3.0_musl/lib/gcc/mips-openwrt-linux-musl/8.3.0/../../../../mips-openwrt-linux-musl/bin/ld: /home/sk/tmp/openwrt/staging_dir/target-mips_24kc_musl/usr/lib/libcdb.a(cdb_init.o): relocation R_MIPS_26 against `fstat' can not be used when making a shared object; recompile with -fPIC
This commit extends the tinycdb Makefile to build and install as well
the shared library as well as the pic archive. dnsdist will then pick
the shared library.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
Sebastian Kemper [Sun, 15 Dec 2019 09:39:00 +0000 (10:39 +0100)]
tinycdb: use OpenWrt flags
Currently tinycdb doesn't use {C,CPP,LD}FLAGS. This commit adds
MAKE_FLAGS to address this.
Before:
make[3]: Entering directory '/home/sk/tmp/openwrt/build_dir/target-mips_24kc_musl/tinycdb-0.78'
ccache_cc -O -D_FILE_OFFSET_BITS=64 -c cdb_init.c
cc1: note: someone does not honour COPTS correctly, passed 0 times
ccache_cc -O -D_FILE_OFFSET_BITS=64 -c cdb_find.c
...
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
Rosen Penev [Sat, 14 Dec 2019 21:33:00 +0000 (13:33 -0800)]
Merge pull request #10791 from micmac1/protobuf-host-libs
protobuf: fix libdir handling for host build
Rosen Penev [Sat, 14 Dec 2019 19:24:40 +0000 (11:24 -0800)]
Merge pull request #10790 from tru7/libfmt
libfmt: bump to version 6.1.2
Sebastian Kemper [Sat, 14 Dec 2019 16:37:56 +0000 (17:37 +0100)]
dnsdist: add missing build dep on protoc
The build needs protoc, otherwise it fails.
checking if we need to link in protobuf... yes
checking for PROTOBUF... yes
checking for protoc... no
configure: error: Protobuf requested but the protobuf compiler was not found
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
Sebastian Kemper [Sat, 14 Dec 2019 16:34:54 +0000 (17:34 +0100)]
dnsdist: add missing lmdb dep
Currently dnsdist is failing at packaging stage when lmdb is in staging:
make[4]: Leaving directory '/builder/shared-workdir/build/sdk/build_dir/target-x86_64_musl/dnsdist-1.4.0'
Package dnsdist is missing dependencies for the following libraries:
liblmdb.so
Makefile:109: recipe for target '/builder/shared-workdir/build/sdk/bin/packages/x86_64/packages/dnsdist_1.4.0-2_x86_64.ipk' failed
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
Sebastian Kemper [Sat, 14 Dec 2019 11:21:32 +0000 (12:21 +0100)]
protobuf: fix libdir handling for host build
On some host machines (example: Gentoo amd64 no-multilib) by default
cmake will install libraries to lib64. But in OpenWrt the correct libdir
is lib (for instance the RPATH is set to lib). So you may end up with
libraries in lib64 while RPATH points to lib:
sk@darth ~/tmp/openwrt $ ldd staging_dir/hostpkg/bin/protoc
linux-vdso.so.1 (0x00007ffc741ea000)
libprotoc.so.3.8.0.0 => not found
libprotobuf.so.3.8.0.0 => not found
libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f0a8f7ea000)
libstdc++.so.6 => /usr/lib/gcc/x86_64-pc-linux-gnu/9.2.0/libstdc++.so.6 (0x00007f0a8f572000)
libm.so.6 => /lib64/libm.so.6 (0x00007f0a8f427000)
libgcc_s.so.1 => /usr/lib/gcc/x86_64-pc-linux-gnu/9.2.0/libgcc_s.so.1 (0x00007f0a8f40d000)
libc.so.6 => /lib64/libc.so.6 (0x00007f0a8f23c000)
/lib64/ld-linux-x86-64.so.2 (0x00007f0a8f827000)
sk@darth ~/tmp/openwrt $
Fix this by specifying the libdir during host builds.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
Othmar Truniger [Sat, 14 Dec 2019 09:28:35 +0000 (10:28 +0100)]
libfmt: bump to version 6.1.2
Signed-off-by: Othmar Truniger <github@truniger.ch>
Rosen Penev [Sat, 14 Dec 2019 08:48:25 +0000 (00:48 -0800)]
Merge pull request #10774 from James-TR/James-TR-patch-1
dnsdist: fix missing quote in menu
Rosen Penev [Sat, 14 Dec 2019 08:26:36 +0000 (00:26 -0800)]
Merge pull request #10782 from dengqf6/ariang
ariang: update to 1.1.4
Rosen Penev [Sat, 14 Dec 2019 05:54:01 +0000 (21:54 -0800)]
mosh: Fix compilation with libcxx
Partial backport of upstream patch.``
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Fri, 13 Dec 2019 01:06:18 +0000 (17:06 -0800)]
libwebp: Fix compilation with mips16
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Fri, 13 Dec 2019 17:00:03 +0000 (09:00 -0800)]
Merge pull request #10764 from neheb/bf
bfdd: Fix compilation with uClibc-ng
DENG Qingfang [Fri, 13 Dec 2019 16:28:03 +0000 (00:28 +0800)]
ariang: update to 1.1.4
Update ariang to 1.1.4
Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
Andy Walsh [Fri, 13 Dec 2019 16:17:19 +0000 (17:17 +0100)]
rpcsvc-proto: add new package
* provides missing libtirpc headers (rpcsvc proto.x)
* provides rpcgen
Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
Andy Walsh [Fri, 13 Dec 2019 16:15:42 +0000 (17:15 +0100)]
libtasn1: add host-build
* samba4 complains that it cant find the libasn1 host bins
Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
Rosen Penev [Fri, 13 Dec 2019 15:20:39 +0000 (07:20 -0800)]
Merge pull request #10775 from rs/nextdns-1.3.1
nextdns: update to version 1.3.1
Alberto Bursi [Fri, 13 Dec 2019 10:12:31 +0000 (11:12 +0100)]
minidlna: add static uuid in config
minidlna uses UUID to uniquely identify the media server
by default, if the "uuid" option is not specified in
its setting file it will try to autogenerate it by
reading MAC address.
This seems to fail on some devices resulting in random
UUID on reboot, and this causes confusion and issues as
for clients this is a new server and must be added to
the list.
In OpenWrt there are also devices where the system can't
read the true MAC address and it is therefore randomized
on reboot.
So, add a static UUID in the settings file.
Since each mindlna server should have a different UUID,
if the user has more than one OpenWrt device with
minidlna, he should change the UUID of the
additional devices.
Signed-off-by: Alberto Bursi <bobafetthotmail@gmail.com>
Jo-Philipp Wich [Fri, 13 Dec 2019 08:08:51 +0000 (09:08 +0100)]
cgi-io: implement exec action
Implement a new "cgi-exec" applet which allows to invoke remote commands
and stream their stdandard output back to the client via HTTP. This is
needed in cases where large amounts of data or binary encoded contents
such as tar archives need to be transferred, which are unsuitable to be
transported via ubus directly.
The exec call is guarded by the same ACL semantics as rpcd's file plugin,
means in order to be able to execute a command remotely, the ubus session
identified by the given session ID must have read access to the "exec"
function of the "cgi-io" scope and an explicit "exec" permission rule for
the invoked command in the "file" scope.
In order to initiate a transfer, a POST request in x-www-form-urlencoded
format must be sent to the applet, with one field "sessionid" holding
the login session and another field "command" specifiying the commandline
to invoke.
Further optional fields are "filename" which - if present - will cause
the download applet to set a Content-Dispostition header and "mimetype"
which allows to let the applet respond with a specific type instead of
the default "application/octet-stream".
Below is an example for the required ACL rules to grant exec access to
both the "date" and "iptables" commands. The "date" rule specifies the
base name of the executable and thus allows invocation with arbitrary
parameters while the latter "iptables" rule merely allows one specific
set of arguments which must appear exactly in the given order.
ubus call session grant '{
"ubus_rpc_session": "...",
"scope": "cgi-io",
"objects": [
[ "exec", "read" ]
]
}'
ubus call session grant '{
"ubus_rpc_session": "...",
"scope": "file",
"objects": [
[ "/bin/date", "exec" ],
[ "/usr/sbin/iptables -n -v -L", "exec" ]
]
}'
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Jan Pavlinec [Wed, 11 Dec 2019 11:44:19 +0000 (12:44 +0100)]
git: update to version 2.24.1 (security fix)
Fixes
CVE-2019-1348, CVE-2019-1349, CVE-2019-1350, CVE-2019-1351,
CVE-2019-1352, CVE-2019-1353, CVE-2019-1354, CVE-2019-1387, and
CVE-2019-19604
And fix deprecated PKG_CPE_ID
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
Olivier Poitrey [Fri, 13 Dec 2019 08:49:21 +0000 (00:49 -0800)]
nextdns: update to version 1.3.1
- IPv6 support
- Fix HTTP/2 negociation
- Improve endpoint fallback
- Add support for unencrypted DNS
- Many other fixes and features
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
James Taylor [Fri, 13 Dec 2019 08:03:53 +0000 (19:03 +1100)]
dnsdist: fix missing quote in menu
Fixes missing double quote in menu
Signed off by: James Taylor <james@jtaylor.id.au>
Rosen Penev [Fri, 13 Dec 2019 07:37:39 +0000 (23:37 -0800)]
ibrdtnd: Remove c++03 option
Needed for libcxx compatibility. It probably generates bigger code.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Fri, 13 Dec 2019 07:36:40 +0000 (23:36 -0800)]
bonnie++: Remove several pointless options
Needed for libcxx compatibility.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Rosen Penev [Fri, 13 Dec 2019 07:03:40 +0000 (23:03 -0800)]
Merge pull request #10773 from James-TR/h2o/wslay-linking
h2o: update wslay link patch to upstream
James Taylor [Fri, 13 Dec 2019 04:55:12 +0000 (15:55 +1100)]
h2o: update wslay link patch to upstream
Update wslay link patch with upstream fix from h2o/h2o#2196
Signed-off-by: James Taylor <james@jtaylor.id.au>
Rosen Penev [Fri, 13 Dec 2019 03:42:47 +0000 (19:42 -0800)]
Merge pull request #10746 from aleksander0m/aleksander/mm-1-12-2
modemmanager: release 1.12.2
Rosen Penev [Fri, 13 Dec 2019 03:19:34 +0000 (19:19 -0800)]
Merge pull request #10771 from nxhack/serialport_bindings_8
node-serialport-bindings: update to 8.0.4
Rosen Penev [Fri, 13 Dec 2019 03:19:23 +0000 (19:19 -0800)]
Merge pull request #10772 from nxhack/serialport_8
node-serialport: update to 8.0.5
Hirokazu MORIKAWA [Fri, 13 Dec 2019 02:32:25 +0000 (11:32 +0900)]
node-serialport: update to 8.0.5
support node v12
Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
Rosen Penev [Fri, 13 Dec 2019 00:15:07 +0000 (16:15 -0800)]
Merge pull request #10723 from neheb/sha
shairport-sync: Update to 3.3.5
Rosen Penev [Fri, 13 Dec 2019 00:11:51 +0000 (16:11 -0800)]
Merge pull request #10717 from WeekendSoftware/safe-search
net/safe-search Update Google host list.
Rosen Penev [Fri, 13 Dec 2019 00:10:09 +0000 (16:10 -0800)]
Merge pull request #10766 from aleksander0m/aleksander/libqmi-1-24-2
libqmi: update to version 1.24.2
Rosen Penev [Fri, 13 Dec 2019 00:09:51 +0000 (16:09 -0800)]
Merge pull request #10767 from James-TR/dnsdist/libcap
dnsdist: add missing dependency on libcap
Rosen Penev [Thu, 12 Dec 2019 15:48:56 +0000 (07:48 -0800)]
Merge pull request #10713 from dengqf6/mtr
mtr: update to 0.93
DENG Qingfang [Tue, 10 Dec 2019 12:04:47 +0000 (20:04 +0800)]
mtr: update to 0.93
Update mtr to 0.93
Add size optimization options
ath79 ipk size: 31.9k -> 31.4k
Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
Rosen Penev [Thu, 12 Dec 2019 15:08:36 +0000 (07:08 -0800)]
Merge pull request #10765 from nxhack/node_hid_1_1_0
node-hid: update to 1.1.0
James Taylor [Thu, 12 Dec 2019 09:25:43 +0000 (20:25 +1100)]
dnsdist: add missing dependency on libcap
When present on the build system dnsdist will try to make use of libcap. This
change adds an explicit dependency to ensure it's present at build time, to
prevent build failures when another package brings the dependency in.
Signed-off-by: James Taylor <james@jtaylor.id.au>