feed/packages.git
4 years agosoftethervpn5: update to 5.01.9672 10646/head
Andy Walsh [Tue, 26 Nov 2019 14:50:20 +0000 (15:50 +0100)]
softethervpn5: update to 5.01.9672

* 5.01.9672 release
* Cedar: handle UDP acceleration and R-UDP versions
* Mayaqua: implement R-UDP version 2, powered by ChaCha20-Poly1305
* Cedar: implement UDP acceleration version 2, powered by ChaCha20-Poly1305
* Cedar: serve new web management interface
* Cedar: implement detailed protocol info
* Mayaqua: add Windows Server 2019 to the supported operating systems list
* Cedar: various fixes
* Cedar: add "DisableIPsecAggressiveMode" option
* Make install dir for unit files configurable
* Protocol.c: adapt ClientConnectGetSocket() for new proxy functions
* Wpc.c: adapt WpcSockConnectEx() for new proxy functions
* Protocol: add ProxyCodeToCedar()
* Move generic proxy stuff from Cedar to Mayaqua
* Proto_OpenVPN.c: improve OvsProcessData(), fix out-of-bounds access found by Coverity
* Proto_OpenVPN.c: fix segmentation fault in OvsProceccRecvPacket()
* Addressing the UDP reflection amplification attack: https://github.com/SoftEtherVPN/SoftEtherVPN/issues/1001
* Mayaqua.h: include <stdarg.h> for "va_list" on Illumos
* Protocol.c: fix bug in ClientConnectGetSocket() causing custom HTTP header not to work
* Mayaqua: move HTTP functions from "Network" to "HTTP"
* Move GetMimeTypeFromFileName() and related structure to Mayaqua
* Mayaqua.h: include <stdio.h> for "FILE"
* Mayaqua.h: include <stddef.h>, for "wchar_t"
* Bump mixin-deep in /src/bin/hamcore/wwwroot/admin/default
* - Fixed the problem occurs when RPC messages between Cluster Members exceed 64Kbytes. - Fixed the RADIUS PEAP client to use the standard TLS versioning. - Implementation of a function to fix the MAC address of L3 VPN protocol by entering e.g. "MAC: 112233445566" in the "Notes" field of the user information. - Implementation of a function to fix the virtual MAC address to be assigned to the L3 VPN client as a string attribute from RADIUS server when authentication.
* Updating built-in Win32 libraries - OpenSSL 1.1.1 -> 1.1.1d - zlib 1.2.3 -> 1.2.11
* Update strtable_cn.stb
* Avoid using hardcoded paths in log file enumeration
* Fix buffer overflow during NETBIOS name resolution
* Update SEVPN.sln
* Create strtable_pt_br.stb
* ci: display error if vpntest failed
* Fix several compile warnings on MS VC++ 2008.
* Enables crash minidump for Win32 vpntest. Minidump files will be saved to the 'C:\Users\<username>\AppData\Local\Temp\vpn_debug' (for normal user) or 'src\bin\vpn_debug\' (for administrator user).
* OpenVPN: use new protocol interface
* Add interface for easy protocol implementation
* add "no-deprecated" to openssl builds "no-deprecated" is widely used in openwrt devices
* Fix LibreSSL support
* Switch to OpenSSL THREADID API
* travis-ci: update openssl, libressl
* enable sonar-scan in travis-ci builds
* Virtual: fix race condition in DHCP server which resulted in multiple clients receiving the same IP
* Mayaqua: Fix compilation without deprecated OpenSSL APIs
* Mayaqua: Replace GNU specific sys/poll.h header with POSIX poll.h
* systemd: replace deprecated CAP_SYS_ADMIN with CAP_SYSLOG

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
4 years agoMerge pull request #10638 from Andy2244/cifsd-tools_update-2019-11-25_19.07
Rosen Penev [Tue, 26 Nov 2019 04:15:21 +0000 (20:15 -0800)]
Merge pull request #10638 from Andy2244/cifsd-tools_update-2019-11-25_19.07

cifsd-tools: update to git (2019-11-25) [19.07]

5 years agoMerge pull request #10631 from jefferyto/python-pyopenssl-19.1.0-openwrt-19.07
Rosen Penev [Mon, 25 Nov 2019 19:14:29 +0000 (11:14 -0800)]
Merge pull request #10631 from jefferyto/python-pyopenssl-19.1.0-openwrt-19.07

[openwrt-19.07] python-pyopenssl: Update to 19.1.0

5 years agocifsd-tools: update to git (2019-11-25) 10638/head
Andy Walsh [Mon, 25 Nov 2019 14:15:47 +0000 (15:15 +0100)]
cifsd-tools: update to git (2019-11-25)

* cifsd-tools: fix Assignment of a signed value which has type 'long'
* init: convert hide_dot_files to yes/no option
* 'read only = no' seems bugged for cifsd/smb.conf, so fix via 'writeable = yes'

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
5 years agoadblock: update 3.8.12
Dirk Brenken [Sat, 23 Nov 2019 12:44:54 +0000 (13:44 +0100)]
adblock: update 3.8.12

* fix possible dns restart issue with DNS File Reset (race condition)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 219abdc5a13cfe7b4c1e567c586d992f03e2d73f)

5 years agotransmission: Disable webseeding
Rosen Penev [Mon, 25 Nov 2019 03:01:58 +0000 (19:01 -0800)]
transmission: Disable webseeding

It causes 100% CPU usage in certain situations. Just disable it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 6d9ee2ec86a461bbc976eaf7f97490657dc97e5c)

5 years agotransmission: Fix tracker issue with some firewalls
Rosen Penev [Mon, 9 Sep 2019 01:39:33 +0000 (18:39 -0700)]
transmission: Fix tracker issue with some firewalls

Some firewalls mandate a minimum size of 4k for SYN packets, which
transmission does not do by default. Upstream issue here:

https://github.com/transmission/transmission/issues/964

Cleanup:

Fixed license info.

Removed two unnecessary patches.

Ran shell script through shellcheck.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 730a1697fed07269a3cca7c90878b50d3ef26465)

5 years agophp7: Update to version 7.2.25
Josef Schlehofer [Sat, 23 Nov 2019 19:11:57 +0000 (20:11 +0100)]
php7: Update to version 7.2.25

- Fixes CVE-2019-11043

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 9bc48abd2ae6e23907d2ccb07bdaed1b6345da64)

5 years agophp7: mark /etc/config/php7-fastcgi as conffile
W. Michael Petullo [Sat, 19 Oct 2019 22:13:41 +0000 (18:13 -0400)]
php7: mark /etc/config/php7-fastcgi as conffile

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 5bc9bb04c5d19ea679a687f6731457e7492d4744)

5 years agophp7-mod-xmlreader: add conditional dependency to php7-mod-dom (fixes #10201)
Michael Heimpold [Tue, 15 Oct 2019 22:01:51 +0000 (00:01 +0200)]
php7-mod-xmlreader: add conditional dependency to php7-mod-dom (fixes #10201)

PHP7 fails to load xmlreader.so (php7-mod-xmlreader) module without
dom.so (php7-mod-dom) module loaded:

-snip-
PHP Warning:  PHP Startup: Unable to load dynamic library 'xmlreader.so'
 (tried: /usr/lib/php/xmlreader.so (Error relocating /usr/lib/php/xmlreader.so:
 dom_node_class_entry: symbol not found), /usr/lib/php/xmlreader.so.so (Error
 loading shared library /usr/lib/php/xmlreader.so.so: No such file or
 directory)) in Unknown on line 0
^C
-snap-

However, this dependency only exists when during build also php7-mod-dom
is selected.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit b8c22fc1ec392272235ce78ddc0ddfc40de5037d)

5 years agophp7: bump to 7.2.23
Stefaan Ghysels [Thu, 3 Oct 2019 11:44:23 +0000 (13:44 +0200)]
php7: bump to 7.2.23

Signed-off-by: Stefaan Ghysels <stefaang@gmail.com>
(cherry picked from commit dacda44755b391b7bd09a15ea762ee551f7d2ce6)

5 years agopython-pyopenssl: Update to 19.1.0 10631/head
Jeffery To [Sun, 24 Nov 2019 19:23:26 +0000 (03:23 +0800)]
python-pyopenssl: Update to 19.1.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from aff03aee1f4aac7c3598ae3e20dceb5064f72b5a)

5 years agoMerge pull request #10619 from Andy2244/samba4_19.07_22-11-2019
Rosen Penev [Fri, 22 Nov 2019 16:34:04 +0000 (08:34 -0800)]
Merge pull request #10619 from Andy2244/samba4_19.07_22-11-2019

samba4: add UCI option 'disable_async_io' [19.07]

5 years agoMerge pull request #10617 from Andy2244/cifsd_22-11-2019_19.07
Rosen Penev [Fri, 22 Nov 2019 16:27:33 +0000 (08:27 -0800)]
Merge pull request #10617 from Andy2244/cifsd_22-11-2019_19.07

cifsd: update to git (2019-11-22) [19.07]

5 years agosamba4: add UCI option 'disable_async_io' 10619/head
Andy Walsh [Fri, 22 Nov 2019 13:15:12 +0000 (14:15 +0100)]
samba4: add UCI option 'disable_async_io'

* add UCI option 'disable_async_io'
* remove [homes] options

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
5 years agocifsd: update to git (2019-11-22) 10617/head
Andy Walsh [Fri, 22 Nov 2019 13:09:23 +0000 (14:09 +0100)]
cifsd: update to git (2019-11-22)

cifsd: fix uninitialized fp could be freed
cifsd: fix potential uninitialized spnego_blob could be freed
cifsd: smbd: replace spinlock_irqsave with spinlock
cifsd: smbd: avoid the lack of client's send credits

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
5 years agobind: update to version 9.14.8 (security fix)
Jan Pavlinec [Thu, 21 Nov 2019 12:13:18 +0000 (13:13 +0100)]
bind: update to version 9.14.8 (security fix)

Fixes CVE-2019-6477

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit 46ca2c7)

5 years agoMerge pull request #10606 from rs/nextdns-1.1.5_19.07
Rosen Penev [Thu, 21 Nov 2019 17:35:50 +0000 (09:35 -0800)]
Merge pull request #10606 from rs/nextdns-1.1.5_19.07

[OpenWRT 19.07] nextdns: Update version 1.1.5 + add per host config option

5 years agonextdns: Update version 1.1.5 + add per host config option 10606/head
Olivier Poitrey [Thu, 21 Nov 2019 10:26:31 +0000 (02:26 -0800)]
nextdns: Update version 1.1.5 + add per host config option

* Update nextdns to version 1.1.5 which adds IPv6 dual stack support.
* Add the ability to configure per host configuration id from uci.

Signed-off-by: Olivier Poitrey <rs@nextdns.io>
5 years agonnn: Add a new package
Josef Schlehofer [Sun, 17 Nov 2019 09:43:58 +0000 (10:43 +0100)]
nnn: Add a new package

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 32cbfce0514ec37fe174a92860c36fc70a91b301)

5 years agounbound: Update to version 1.9.5
Josef Schlehofer [Tue, 19 Nov 2019 23:29:37 +0000 (00:29 +0100)]
unbound: Update to version 1.9.5

Fixes CVE-2019-18934

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 24667753a20250e3df33ffe7f30b063a02ff01ee)

5 years agoMerge pull request #10603 from Andy2244/cifsd-19.07
Rosen Penev [Thu, 21 Nov 2019 00:45:32 +0000 (16:45 -0800)]
Merge pull request #10603 from Andy2244/cifsd-19.07

cifsd: add package cifsd [backport]

5 years agocifsd: add package cifsd [backport] 10603/head
Andy Walsh [Wed, 20 Nov 2019 21:24:29 +0000 (22:24 +0100)]
cifsd: add package cifsd [backport]

* adds cifsd (cifs kernel server) + tools

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
5 years agoknot: update to version 2.9.1
Jan Hak [Mon, 18 Nov 2019 16:13:17 +0000 (17:13 +0100)]
knot: update to version 2.9.1

Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry-picked from commit 559672d)

5 years agoMerge pull request #10586 from commodo/openwrt-19.07-django1
Rosen Penev [Tue, 19 Nov 2019 19:14:34 +0000 (11:14 -0800)]
Merge pull request #10586 from commodo/openwrt-19.07-django1

django: bump to version 1.11.26

5 years agoMerge pull request #10580 from gladiac1337/haproxy-2.0.9-openwrt-19.07
Hannu Nyman [Tue, 19 Nov 2019 17:14:37 +0000 (19:14 +0200)]
Merge pull request #10580 from gladiac1337/haproxy-2.0.9-openwrt-19.07

[openwrt-19.07] haproxy: Update HAProxy to v2.0.9

5 years agotravelmate: update 1.5.3
Dirk Brenken [Mon, 18 Nov 2019 18:28:23 +0000 (19:28 +0100)]
travelmate: update 1.5.3

* some init tweaks
* use the usual wifi wrapper for reloads
* compatibility fix for latest wifi-related changes
  in master (dynamic wireless radio reconfiguration)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 05c3153bb7ba627f297dd64954fbe321b7617d90)

5 years agodjango: bump to version 1.11.26 10586/head
Alexandru Ardelean [Tue, 19 Nov 2019 08:49:50 +0000 (10:49 +0200)]
django: bump to version 1.11.26

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
5 years agoadblock: update 3.8.11
Dirk Brenken [Sat, 16 Nov 2019 16:36:08 +0000 (17:36 +0100)]
adblock: update 3.8.11

* some more init tweaks
* update/cleanup readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit bc299d03f23a8c9d306868de34c191e4bb0ee19c)

5 years agohaproxy: Update HAProxy to v2.0.9 10580/head
Christian Lachner [Sun, 17 Nov 2019 09:23:39 +0000 (10:23 +0100)]
haproxy: Update HAProxy to v2.0.9

- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
5 years agoprometheus-node-exporter-lua: bump version
Etienne Champetier [Mon, 18 Nov 2019 01:33:49 +0000 (17:33 -0800)]
prometheus-node-exporter-lua: bump version

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 50b825e7faf0f1b5e1a260280fbe6c5b9916bc8d)

5 years agoprometheus-node-exporter-lua: an unavaliable wifi interface may have stopped the...
Zoltan Haindrich [Fri, 4 Oct 2019 15:43:50 +0000 (15:43 +0000)]
prometheus-node-exporter-lua: an unavaliable wifi interface may have stopped the scraper from functioning

Signed-off-by: Zoltan Haindrich <kirk@rxd.hu>
(cherry picked from commit 7bec619f5367110b9e336ef1a65737d37b1f0056)

5 years agoprometheus-node-exporter-lua: respawn the process
Andre Heider [Wed, 2 Jan 2019 14:33:16 +0000 (15:33 +0100)]
prometheus-node-exporter-lua: respawn the process

Signed-off-by: Andre Heider <a.heider@gmail.com>
(cherry picked from commit a3af4c36916997d3972272bfd0242bb012783eda)

5 years agoprometheus-node-exporter-lua: add a config reload trigger
Andre Heider [Wed, 2 Jan 2019 14:33:08 +0000 (15:33 +0100)]
prometheus-node-exporter-lua: add a config reload trigger

Signed-off-by: Andre Heider <a.heider@gmail.com>
(cherry picked from commit d8e637d064ba62d60649bc11c2fd4b41ff9e7710)

5 years agoprometheus-node-exporter-lua: switch config to openwrt interface names
Andre Heider [Sun, 23 Dec 2018 10:43:25 +0000 (11:43 +0100)]
prometheus-node-exporter-lua: switch config to openwrt interface names

Drop the config knob 'listen_address' and introduce 'listen_interface'
and 'listen_ipv6' instead.

'listen_interface' takes an openwrt interface name ('loopback', 'lan',
'wan' etc, or "*" for all), from which the primary IP is used to listen
on. If 'listen_ipv6' is set to '1', the IPv6 adress will be used, IPv4
elsewise.

procd interface triggers are now combined with this, so if the listen
interface is not yet configured when the init script is executed, the
process start is defered, and the trigger takes care of that once
the interface is ready.

Fixes #7670

Signed-off-by: Andre Heider <a.heider@gmail.com>
(cherry picked from commit 48568ad9f9dfca6cecdcf1eabda629d8ccb77f42)

5 years agoMerge pull request #10577 from jefferyto/python-zope-interface-4.7.1-openwrt-19.07
Rosen Penev [Mon, 18 Nov 2019 02:11:45 +0000 (18:11 -0800)]
Merge pull request #10577 from jefferyto/python-zope-interface-4.7.1-openwrt-19.07

[openwrt-19.07] python-zope-interface: Update to 4.7.1, refresh patch

5 years agoMerge pull request #10575 from jefferyto/python-twisted-19.10.0-openwrt-19.07
Rosen Penev [Mon, 18 Nov 2019 02:11:27 +0000 (18:11 -0800)]
Merge pull request #10575 from jefferyto/python-twisted-19.10.0-openwrt-19.07

[openwrt-19.07] python-twisted: Update to 19.10.0, refresh patches

5 years agoMerge pull request #10567 from rs/nextdns-1.1.3_19.07
Rosen Penev [Mon, 18 Nov 2019 01:52:47 +0000 (17:52 -0800)]
Merge pull request #10567 from rs/nextdns-1.1.3_19.07

[19.07] nextdns: update to 1.1.3

5 years agonextdns: update to 1.1.3 10567/head
Olivier Poitrey [Sun, 17 Nov 2019 06:57:53 +0000 (22:57 -0800)]
nextdns: update to 1.1.3

Signed-off-by: Olivier Poitrey <rs@nextdns.io>
5 years agodcwapd: Update init script to use procd
Carey Sonsino [Wed, 13 Nov 2019 18:05:47 +0000 (13:05 -0500)]
dcwapd: Update init script to use procd

consolidate shell scripts into init script
remove "litter" from uci file
update default UCI values

Signed-off-by: Carey Sonsino <careys@edgewaterwireless.com>
Signed-off-by: Carey Sonsino <csonsino@gmail.com>
(cherry-picked from 0d5b50c4b)

5 years agopython-zope-interface: Update to 4.7.1, refresh patch 10577/head
Jeffery To [Sun, 17 Nov 2019 20:45:58 +0000 (04:45 +0800)]
python-zope-interface: Update to 4.7.1, refresh patch

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 5e8feda04a9b458ce2e61c111ea8256ce7031557)

5 years agoMerge pull request #10573 from jefferyto/python-pyasn1-0.4.8-openwrt-19.07
Hannu Nyman [Sun, 17 Nov 2019 20:44:11 +0000 (22:44 +0200)]
Merge pull request #10573 from jefferyto/python-pyasn1-0.4.8-openwrt-19.07

[openwrt-19.07] python-pyasn1: Update to 0.4.8

5 years agopython-twisted: Update to 19.10.0, refresh patches 10575/head
Jeffery To [Sun, 17 Nov 2019 20:33:26 +0000 (04:33 +0800)]
python-twisted: Update to 19.10.0, refresh patches

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from c56770a570d6e87b0bc06dba5c552f5f35253728)

5 years agopython-pyasn1: Update to 0.4.8 10573/head
Jeffery To [Sun, 17 Nov 2019 20:04:35 +0000 (04:04 +0800)]
python-pyasn1: Update to 0.4.8

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from b99abe8dd8a3c3cd9118e891dd8353802d660ad0)

5 years agoacme: Add dependency on luci-compat for luci-app-acme
Toke Høiland-Jørgensen [Sun, 17 Nov 2019 15:14:45 +0000 (16:14 +0100)]
acme: Add dependency on luci-compat for luci-app-acme

Fixes #10564.

Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
5 years agoacme: Update to upstream 2.8.3
Toke Høiland-Jørgensen [Wed, 23 Oct 2019 10:22:31 +0000 (12:22 +0200)]
acme: Update to upstream 2.8.3

Upstream release message:
"Letsencrypt CA recent changed the CDN provider, which resulted in hanging issues.
Any downstream package should update.
This is important."

Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
5 years agoacme: Log acme.sh command invocation
Toke Høiland-Jørgensen [Wed, 23 Oct 2019 10:21:32 +0000 (12:21 +0200)]
acme: Log acme.sh command invocation

Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
5 years agoacme: depends on gnu-wget
Yousong Zhou [Mon, 9 Sep 2019 03:05:15 +0000 (03:05 +0000)]
acme: depends on gnu-wget

Fixes openwrt/packages#9456

Ref: https://github.com/openwrt/packages/issues/9456
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
5 years agoacme: Update to 2.8.1
Rosen Penev [Thu, 6 Jun 2019 01:21:38 +0000 (18:21 -0700)]
acme: Update to 2.8.1

Fix license info to use SPDX name.

Switched to wget instead of curl to avoid having a dependency on 2 SSL
libraries.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
5 years agowget: provides gnu-wget
Yousong Zhou [Mon, 9 Sep 2019 02:59:50 +0000 (02:59 +0000)]
wget: provides gnu-wget

So that packages like acme requiring features from it can depend on it
explicitly, not the more basic "wget" which is also provided by
"uclient-fetch"

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
5 years agottyd: update to 1.5.2 and add init script
Richard Yu [Sun, 17 Nov 2019 13:53:07 +0000 (15:53 +0200)]
ttyd: update to 1.5.2 and add init script

Signed-off-by: Richard Yu <yurichard3839@gmail.com>
cherry picked from commit 9e325b47cbfee2a535dcd5f19baa6368bf06b830
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
5 years agottyd: update to 1.5.1
Shuanglei Tao [Sun, 17 Nov 2019 13:51:56 +0000 (15:51 +0200)]
ttyd: update to 1.5.1

Signed-off-by: Shuanglei Tao <tsl0922@gmail.com>
cherry picked from commit 6181693bade0c523aa4a05157ca6faaf1af39765
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
5 years agoboost: Fix fiber compilation for mips
Rosen Penev [Fri, 15 Nov 2019 20:34:26 +0000 (12:34 -0800)]
boost: Fix fiber compilation for mips

The issue was that the pause instruction was emitted through an asm
directive which was not correct for some mips platforms.

Simplified boost-fiber-exclude as a result.

Removed uClibc-ng math patch. It was not correct as it broke float and
long double support (std variants use function overloads). A different
solution was applied upstream. As it's quite annoying to backport, just
wait until a new release comes with that change. ARC as a platform is
barely supported anyways.

Swapped asio patch for the upstream submission, which is unfortunately, in
limbo.

Refreshed remaining patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from f795779c0a4080ccf497a0266e33f1842248efe8)

5 years agoboost: Remove several host libraries
Rosen Penev [Sat, 5 Oct 2019 23:59:41 +0000 (16:59 -0700)]
boost: Remove several host libraries

The facebook people have been working on removing Boost dependencies from
their projects. This is the current state.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from ddd4109c1cc87193f2fd04eda1adb0886226fa67)

5 years agoboost: Remove thread dependency from context
Rosen Penev [Mon, 7 Oct 2019 18:06:17 +0000 (11:06 -0700)]
boost: Remove thread dependency from context

thread is only used when the C++ mutex header is missing. AFAIK, this is
the case on Windows and not on Linux. Certainly not in OpenWrt.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 260d4a346afeffec5f7e4818d1179ea8db70420e)

5 years agoMerge pull request #10556 from rs/feature_nextdns_19_07
Rosen Penev [Fri, 15 Nov 2019 22:11:54 +0000 (14:11 -0800)]
Merge pull request #10556 from rs/feature_nextdns_19_07

nextdns: add DNS over HTTPS with NextDNS integration

5 years agonextdns: add DNS over HTTPS with NextDNS integration 10556/head
Olivier Poitrey [Tue, 5 Nov 2019 20:48:49 +0000 (12:48 -0800)]
nextdns: add DNS over HTTPS with NextDNS integration

Maintainer: @rs

Signed-off-by: Olivier Poitrey <rs@nextdns.io>
5 years agobanip: update 0.3.10
Dirk Brenken [Fri, 15 Nov 2019 11:48:40 +0000 (12:48 +0100)]
banip: update 0.3.10

* add missing logd dependency
* check if logd is enabled during runtime
* some more init tweaks

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit de149441a4044ef3a67d95daab6c21818cf2dc8c)

5 years agomwan3: sync PKG_RELEASE number and PKG_VERSION with master
Florian Eckert [Fri, 15 Nov 2019 08:59:07 +0000 (09:59 +0100)]
mwan3: sync PKG_RELEASE number and PKG_VERSION with master

Since the merge of the luci master branch into the luci openwrt.19.07 branch,
the ubus API was not in sync anymore. So all commits from the master
branch where backported into the openwrt-19.07 branch. But this could
not be done linear. There were already some fixes cherry-picked from the
master and the version does not match anymore. This commit syncronized
the PKG_VERSION and the PKG_RELEASE again to make clear that the
version in master and openwrt-19.07 are even again and have so the
same software version until to this commit.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
5 years agomwan3: Add missing IPs to wanb
Daniel A. Maierhofer [Thu, 25 Jul 2019 21:13:44 +0000 (23:13 +0200)]
mwan3: Add missing IPs to wanb

Maintainer: Florian Eckert @feckert
Compile tested: not needed
Run tested: x86_64

Description:
Only two of the four IPs defined for wan are found in wanb, adding it so it is the same.

Signed-off-by: Daniel A. Maierhofer <git@damadmai.at>
(cherry picked from commit 1e97156adc49d38fa22dc7783b81e976115aed02)

5 years agomwan3: update version to 2.8.0
Florian Eckert [Thu, 4 Jul 2019 10:06:27 +0000 (12:06 +0200)]
mwan3: update version to 2.8.0

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit e100de8bd8345b377bf58ef2cd7fb87074e50a47)

5 years agomwan3: add netifd up info to mwan3 ubus status output
Florian Eckert [Wed, 3 Jul 2019 14:37:16 +0000 (16:37 +0200)]
mwan3: add netifd up info to mwan3 ubus status output

Add the netifd up status output to the mwan3 ubus status output.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 27db561752f0cc8db344e03fa29cf90653332dff)

5 years agomwan3: add enabled info to mwan3 ubus status
Florian Eckert [Tue, 2 Jul 2019 09:47:47 +0000 (11:47 +0200)]
mwan3: add enabled info to mwan3 ubus status

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit cfba93a203dd5b9705b407a723f9748507ee3b69)

5 years agomwan3: add interface uptime netifd value to ubus mwan3 status output
Florian Eckert [Fri, 28 Jun 2019 11:04:46 +0000 (13:04 +0200)]
mwan3: add interface uptime netifd value to ubus mwan3 status output

Add missing netifd uptime info to ubus status call.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit bfa849c14e8c3404407930fc0d5db454514e513f)

5 years agomwan3: rename downtime to offline
Florian Eckert [Fri, 28 Jun 2019 10:41:17 +0000 (12:41 +0200)]
mwan3: rename downtime to offline

Rename downtime ubus output from mwan3 to offline.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 6c2cd78c6f5015fe24078b98a7455ae0cc88ff07)

5 years agomwan3: rename uptime to online
Florian Eckert [Fri, 28 Jun 2019 10:39:05 +0000 (12:39 +0200)]
mwan3: rename uptime to online

Rename uptime ubus output from mwan3 to online.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 3be40786f54b5d6534ddd6a58c090b3963180eed)

5 years agocollectd: remove the patch scaling ping_droprate from 0-1 to 0-100
Yousong Zhou [Fri, 9 Aug 2019 13:32:56 +0000 (13:32 +0000)]
collectd: remove the patch scaling ping_droprate from 0-1 to 0-100

Upstream project's behaviour of reporting this data source in range 0-1
is used by at least CentOS 7 collectd 5.8.1, very likely the same
behaviour is also in widely use by other distributions.

The change is important for providing consistent experience across
collectd deployments on different environments

Ref: https://github.com/collectd/collectd/pull/3244
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 2f66fa5c233e707e45485126e50daf1276f77da1)
Ref: https://github.com/openwrt/luci/issues/3308

5 years agomwan3: Fix json_load fails with some data
yurtesen [Tue, 12 Nov 2019 15:53:51 +0000 (17:53 +0200)]
mwan3: Fix json_load fails with some data

Sometimes the return value of `ubus -S call network.interface.wan status`
cause `json_load` to return `Failed to parse message data` error.

To avoid this, the JSON data always should be quoted with double quotes.

Signed-off-by: Evren Yurtesen <eyurtese@abo.fi>
Removed quoatation marks from commit heading
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Update the version string from 2.8.1 (master) to 2.7.15 (openwrt-19.07)
(cherry picked from commit 94e0c78826b15c95c40bfa82bbf8bba35dc56961)

5 years agoio: Add TARGET_LDFLAGS to fix PIE
Hauke Mehrtens [Thu, 7 Nov 2019 20:06:04 +0000 (21:06 +0100)]
io: Add TARGET_LDFLAGS to fix PIE

Add the OpenWrt TARGET_LDFLAGS to the compile command to activate PIE support
for the io tool when it is activated globally in OpenWrt.

Signed-off-by: Hauke Mehrtens <hauke.mehrtens@intel.com>
(cherry-picked from b46d21a54ee5a073f5d5082e7d90cf07113c8a9a)

5 years agoio: Fix printing 4 bytes memory on 64 bit systems
Hauke Mehrtens [Thu, 7 Nov 2019 21:13:13 +0000 (22:13 +0100)]
io: Fix printing 4 bytes memory on 64 bit systems

On 64 bit Linux systems long is 8 bytes long, on 32 bit Linux systems it
is 4 bytes long. Here we want to print 4 bytes and not 8 bytes, use int
instead of long.

This fixes printing 4 bytes on 64 bit systems.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry-picked from 9936e16b724b4388204e21e2d4c3f49283d980eb)

5 years agoio: Open /dev/mem with O_SYNC for uncached access
Hauke Mehrtens [Mon, 22 Jul 2019 13:03:57 +0000 (15:03 +0200)]
io: Open /dev/mem with O_SYNC for uncached access

Only when /dev/mem is opened with O_SYNC the write and *read* is done
uncached. We saw wrong values read out from the hardware without setting
O_SYNC, the busybox devmem tool showed different values, when O_SYNC is
also set for the io tool, it reads out the same values as devmem.
When looking at the drivers/char/mem.c file in the kernel it is behaving
differently based on the O_DSYNC flag.

Signed-off-by: Hauke Mehrtens <hauke.mehrtens@intel.com>
(cherry-picked from 90df0f3e241dc233c3121dfc5e1be937c6c987bc)

5 years agopcre: remove unnecessary dependency on C++ lib
DENG Qingfang [Tue, 23 Jul 2019 06:01:29 +0000 (14:01 +0800)]
pcre: remove unnecessary dependency on C++ lib

Add libpcrecpp to PKG_CONFIG_DEPENDS to properly trigger
reconfiguration, avoiding unnecessary dependency.

This reverts commit 17090fecf18c795f5bfa5e1ea375ccd65d24f227.
This reverts commit ec138f51ab54873252bbe3e848f5fa9c20de78b9.

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
(cherry-picked from 41814de0fcc52ce055102ab2f81870bccf884b12)

5 years agontpd: Fix libevent dependencies
Kenneth J. Miller [Mon, 21 Oct 2019 00:13:54 +0000 (02:13 +0200)]
ntpd: Fix libevent dependencies

Add required libevent2-pthreads dependency for all ntpd
subpackages.

Remove keygen-specific libevent2-core support as it is
automatically selected by the libevent2-pthreads dependency.

nptd: Bump PKG_RELEASE

Fixes: openwrt/packages#10307
Signed-off-by: Kenneth J. Miller <ken@miller.ec>
(cherry picked from commit ded6468744f6cda3adfedb1e560a5249c964e3a7)

5 years agoMerge pull request #10525 from jefferyto/python-six-1.13.0-openwrt-19.07
Hannu Nyman [Mon, 11 Nov 2019 17:36:54 +0000 (19:36 +0200)]
Merge pull request #10525 from jefferyto/python-six-1.13.0-openwrt-19.07

[openwrt-19.07] python-six: Update to 1.13.0

5 years agopython-six: Update to 1.13.0 10525/head
Jeffery To [Mon, 11 Nov 2019 10:35:38 +0000 (18:35 +0800)]
python-six: Update to 1.13.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 5be603a8362d0edded5d3d102a4fc35425c41b46)

5 years agoRevert "Revert "perl-www-curl: curl 7.66.0 compatibility""
Josef Schlehofer [Sun, 10 Nov 2019 19:39:10 +0000 (20:39 +0100)]
Revert "Revert "perl-www-curl: curl 7.66.0 compatibility""

This is required as curl 7.66.0 was cherry-picked to openwrt-19.07 3
days ago. Otherwise, compilation of perl-www-curl fails.

This reverts commit ec6cd9b9c395d8f8dc6c8566a536fa6805734c96.

5 years agobanip: update 0.3.9
Dirk Brenken [Sun, 10 Nov 2019 17:55:21 +0000 (18:55 +0100)]
banip: update 0.3.9

* fix 'enabled' service check

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit e38810f38e8772c1f76397b64f71ac6f285fa90e)

5 years agobanIP: update 0.3.8
Dirk Brenken [Sat, 9 Nov 2019 05:40:40 +0000 (06:40 +0100)]
banIP: update 0.3.8

* limit firewall hotplug trigger to certain wan 'INTERFACE' as well,
  to prevent possible race conditions during boot

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 0dee2a92de0ffdc5007e41802a43456ce3b5bf22)

5 years agoadblock: update 3.8.10
Dirk Brenken [Sun, 10 Nov 2019 17:48:54 +0000 (18:48 +0100)]
adblock: update 3.8.10

* fix broken unbound integration

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit be7a89cecbc39133c39baade559ac4319a0a12ab)

5 years agoMerge pull request #10515 from gladiac1337/haproxy-2.0.8-up2-owrt-19.07
Rosen Penev [Sun, 10 Nov 2019 18:00:53 +0000 (10:00 -0800)]
Merge pull request #10515 from gladiac1337/haproxy-2.0.8-up2-owrt-19.07

[openwrt-19.07] haproxy: Update patches for HAProxy v2.0.8 + migrate to procd

5 years agoknot: update to version 2.9.0
Jan Hák [Wed, 16 Oct 2019 12:42:04 +0000 (14:42 +0200)]
knot: update to version 2.9.0

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry-picked from commit f9e3d4e0fa99fde9fcc00eec172339cbe13635a1)

5 years agoknot: update to version 2.8.4
Jan Hák [Wed, 25 Sep 2019 13:00:54 +0000 (15:00 +0200)]
knot: update to version 2.8.4

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry-picked from commit 8a82181c27e383baf60247463c164ee2f318f63d)

5 years agodovecot: update to 2.3.8
Lucian Cristian [Sat, 26 Oct 2019 18:04:57 +0000 (21:04 +0300)]
dovecot: update to 2.3.8

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry-picked from commit 962716aad7013ec6fca4503ad7fa8db11f3302b2)

5 years agolibedit: update to 20191025-3.1
Jan Hák [Tue, 29 Oct 2019 12:26:22 +0000 (13:26 +0100)]
libedit: update to 20191025-3.1

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry-picked from commit 440c27a4a50e191e82154df37e021b5f5b253009)

5 years agodnscrypt-proxy2: Update to version 2.0.29
Josef Schlehofer [Wed, 30 Oct 2019 22:55:33 +0000 (23:55 +0100)]
dnscrypt-proxy2: Update to version 2.0.29

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 69316134c363e7911b78cc6967dbc334ba054df4)

5 years agopython-zipp: fix python-more-itertools dependency
Josef Schlehofer [Sun, 3 Nov 2019 12:13:12 +0000 (13:13 +0100)]
python-zipp: fix python-more-itertools dependency

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 426ed75dbeec4448ee2cec16bf7c78ee7b3528dc)

5 years agopython-zipp: add new package
Jan Pavlinec [Fri, 1 Nov 2019 17:00:51 +0000 (18:00 +0100)]
python-zipp: add new package

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit f0a79ca148c7413c51b10bae743a056ac2acc07e)

5 years agobind: Update to version 9.14.7
Josef Schlehofer [Sun, 20 Oct 2019 00:08:57 +0000 (02:08 +0200)]
bind: Update to version 9.14.7

Fixes CVE-2019-6475 and CVE-2019-6476

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 7b9af101f69c910f216ac014efb30be22784a70e)

5 years agoperl: fixed host compilation of static perl on MacOS
Jakub Piotr Cłapa [Thu, 22 Aug 2019 08:55:03 +0000 (10:55 +0200)]
perl: fixed host compilation of static perl on MacOS

All symbols on MacOS are prefixed with an underscore which
interfered with the filtering mechanism (added in perl 5.28)
for extension libraries to be linked into static perl.

Signed-off-by: Jakub Piotr Cłapa <jpc@loee.pl>
(cherry-picked from commit 3954356)

5 years agolibmaxminddb: update to version 1.4.2
Jan Pavlinec [Thu, 7 Nov 2019 10:14:05 +0000 (11:14 +0100)]
libmaxminddb: update to version 1.4.2

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit 62a9110bc56b731e212fb51681f5e74185366df7)

5 years agoclamav: Update to version 0.101.4 10517/head
Josef Schlehofer [Sun, 10 Nov 2019 16:00:41 +0000 (17:00 +0100)]
clamav: Update to version 0.101.4

Change deprecated options to a new one:
DetectBrokenExecutables to AlertBrokenExecutables
ArchiveBlockEncrypted to AlertEncrypted

Fixes: CVE-2019-12900 and CVE-2019-12625
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
5 years agohaproxy: Rework hotplug script for HAProxy 10515/head
Christian Lachner [Fri, 8 Nov 2019 13:38:31 +0000 (14:38 +0100)]
haproxy: Rework hotplug script for HAProxy

- Migrated init-script to procd.
- Removed the old hotplug script as it is unnecessary and
  caused long boot-times for r7800 and possibly others.

Signed-off-by: Christian Lachner <gladiac@gmail.com>
5 years agohaproxy: Update patches for HAProxy v2.0.8
Christian Lachner [Sun, 10 Nov 2019 10:04:14 +0000 (11:04 +0100)]
haproxy: Update patches for HAProxy v2.0.8

- Add new patches (see https://www.haproxy.org/bugs/bugs-2.0.8.html)

Signed-off-by: Christian Lachner <gladiac@gmail.com>
5 years agoRevert "perl-www-curl: curl 7.66.0 compatibility"
Rosen Penev [Sat, 9 Nov 2019 19:30:15 +0000 (11:30 -0800)]
Revert "perl-www-curl: curl 7.66.0 compatibility"

This reverts commit 3d98d7fd05d72ec163ae1b19fb0be40ea80ef881.

This was a bad backport.

5 years agoRevert "haproxy: Update patches for HAProxy v2.0.8"
Hannu Nyman [Sat, 9 Nov 2019 08:16:33 +0000 (10:16 +0200)]
Revert "haproxy: Update patches for HAProxy v2.0.8"

This reverts commit 76a2da3fd413f607b0c0ea2f0eeabb088857f020.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
5 years agoRevert "haproxy: Rework hotplug script for HAProxy"
Hannu Nyman [Sat, 9 Nov 2019 08:16:02 +0000 (10:16 +0200)]
Revert "haproxy: Rework hotplug script for HAProxy"

This reverts commit c9ee50d1900921f13319509396d69dae61e3f8ca.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
5 years agoMerge pull request #10442 from gladiac1337/haproxy-2.0.8-up-owrt-19.07
Hannu Nyman [Sat, 9 Nov 2019 07:42:01 +0000 (09:42 +0200)]
Merge pull request #10442 from gladiac1337/haproxy-2.0.8-up-owrt-19.07

[openwrt-19.07] haproxy: Update patches for HAProxy v2.0.8 + fix hotplug script

5 years agobanip: update 0.3.7
Dirk Brenken [Fri, 8 Nov 2019 17:40:30 +0000 (18:40 +0100)]
banip: update 0.3.7

* fix a logical glitch in the hotplug event handler
* properly handle fatal iptables errors - even in subshells

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 49b43b81e8a8c32465d3de921d8289541de3e7e1)

5 years agobanip: update 0.3.6
Dirk Brenken [Wed, 6 Nov 2019 19:45:20 +0000 (20:45 +0100)]
banip: update 0.3.6

* more startup tweaks
* re-use f_log function in helper scripts
* small fixes / polish up for forthcoming 19.07 release

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 72fba3a17b8e7c78ced4fb86911ed3568c402077)

5 years agobanip: update 0.3.5
Dirk Brenken [Sun, 3 Nov 2019 15:44:22 +0000 (16:44 +0100)]
banip: update 0.3.5

* fix race condition in download utility detection during boot
* fix multiple possible bugs in ipset creation
* prevent parallel service starts
* refine service trigger handling
* add ssh daemon auto detection
* print to stdout if 'logger' is not available

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit fcea2f75c3f071b7abf9396d9e052a162dab4cef)