feed/packages.git
4 years agoMerge pull request #11729 from stangri/19.07-vpn-policy-routing
Hannu Nyman [Wed, 1 Apr 2020 06:07:01 +0000 (09:07 +0300)]
Merge pull request #11729 from stangri/19.07-vpn-policy-routing

[19.07] vpn-policy-routing: separation between auto/all proto; mwan3 compatibility; README update

4 years agovpn-policy-routing: separation between auto/all proto; compatibility with mwan3;... 11729/head
Stan Grishin [Tue, 31 Mar 2020 23:05:46 +0000 (23:05 +0000)]
vpn-policy-routing: separation between auto/all proto; compatibility with mwan3; README update

Signed-off-by: Stan Grishin <stangri@melmac.net>
4 years agognutls: updated to 3.6.13
Nikos Mavrogiannopoulos [Tue, 31 Mar 2020 20:56:08 +0000 (22:56 +0200)]
gnutls: updated to 3.6.13

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
4 years agoMerge pull request #11699 from stangri/19.07-simple-adblock
Hannu Nyman [Sun, 29 Mar 2020 07:00:52 +0000 (10:00 +0300)]
Merge pull request #11699 from stangri/19.07-simple-adblock

[19.07] simple-adblock: support multiple dnsmasq instances + internal refactoring

4 years agosimple-adblock: support multiple dnsmasq instances; rework communication between... 11699/head
Stan Grishin [Sun, 29 Mar 2020 05:13:18 +0000 (05:13 +0000)]
simple-adblock: support multiple dnsmasq instances; rework communication between principal package and luci app

Signed-off-by: Stan Grishin <stangri@melmac.net>
4 years agoavahi: update to 0.8
Rosen Penev [Wed, 26 Feb 2020 03:31:34 +0000 (19:31 -0800)]
avahi: update to 0.8

Clean up Makefile slightly.

Update configure options for the new version.

Remove first patch and update the other one.

Use a different solution for the stack protector on certain platforms.

Run script through shellcheck. Small quote fix.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 9290d4107722146d5c8b6e500eb2c3ce0b0a9e67)

4 years agoavahi: convert to procd
Rosen Penev [Thu, 6 Feb 2020 03:28:25 +0000 (19:28 -0800)]
avahi: convert to procd

Add license information.

Small cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f41612bc9c8633f931517c59f145a86f9e09eca3)

4 years agoavahi: Fix pkgconfig files to be cross compile friendly
Rosen Penev [Sat, 28 Sep 2019 23:42:15 +0000 (16:42 -0700)]
avahi: Fix pkgconfig files to be cross compile friendly

libdir should not point to the host.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 736ebb16b68d3708a0071268736e02c6bcfd5a05)

4 years agoflac: Update to 1.33
Rosen Penev [Fri, 9 Aug 2019 18:31:00 +0000 (11:31 -0700)]
flac: Update to 1.33

Some adjustments to the configure flags.

Removed upstreamed patches.

Added PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b82bdd3f0ebd8ee1cb444bd450efce6fe7856b89)

4 years agomsmtp: remove myself as maintainer
Rosen Penev [Mon, 16 Mar 2020 02:57:06 +0000 (19:57 -0700)]
msmtp: remove myself as maintainer

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 842b9f0f4d3f6b6f5d3984c3c998dcc3baaba2e5)

4 years agomsmtp: Update to 1.8.7
Rosen Penev [Fri, 3 Jan 2020 02:29:04 +0000 (18:29 -0800)]
msmtp: Update to 1.8.7

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 9a67d3bfb303bc464523fdd5dc4a98bdb27cdbd3)

4 years agomsmtp: Update to 1.8.6
Rosen Penev [Fri, 18 Oct 2019 21:47:45 +0000 (14:47 -0700)]
msmtp: Update to 1.8.6

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 04b9f209a067ad378cfd69f18429db5a570852c2)

4 years agompg123: Update to 1.25.13
Rosen Penev [Fri, 1 Nov 2019 01:26:26 +0000 (18:26 -0700)]
mpg123: Update to 1.25.13

Fixed license information.

Small Makefile rearrangements for consistency.

Added PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit aaca589342d793b37afb922ae06b00316ad9c4c4)

4 years agoscreen: update to 4.8.0
Rosen Penev [Wed, 12 Feb 2020 02:36:05 +0000 (18:36 -0800)]
screen: update to 4.8.0

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 318d2dd74bd231418efaa388f3f428cbedf1e32e)

4 years agoscreen: Update to 4.7.0
Rosen Penev [Fri, 18 Oct 2019 22:13:59 +0000 (15:13 -0700)]
screen: Update to 4.7.0

Remove all patches. They have all been merged upstream.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 29b39264d618a6b9c90e6e72e69abf51bf21b4cf)

4 years agozstd: Fix compilation with uClibc-ng
Rosen Penev [Mon, 2 Dec 2019 04:49:23 +0000 (20:49 -0800)]
zstd: Fix compilation with uClibc-ng

Upstream backports.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 54266c99b2a2e37a4c01b02ae74346874db7003c)

4 years agozstd: Update to 1.4.4
Rosen Penev [Thu, 7 Nov 2019 01:19:16 +0000 (17:19 -0800)]
zstd: Update to 1.4.4

More speed improvements.

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit aaccad695e51bc3b05699fc8f2db70bc7157dd9e)

4 years agonano: update to 4.9
Hannu Nyman [Thu, 26 Mar 2020 19:36:36 +0000 (21:36 +0200)]
nano: update to 4.9

Update nano editor to version 4.9

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 09fd4445b3f7c426212ed61b3989e1994255a8aa)

4 years agotor: update to version 0.4.2.7 (security fix)
Jan Pavlinec [Tue, 24 Mar 2020 11:02:30 +0000 (12:02 +0100)]
tor: update to version 0.4.2.7 (security fix)

Fixes:
CVE-2020-10592

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
4 years agocollectd: disable onewire plugin, BROKEN since 2009
Hannu Nyman [Thu, 26 Mar 2020 16:44:42 +0000 (18:44 +0200)]
collectd: disable onewire plugin, BROKEN since 2009

Mark the onewire plugin as disabled, as the plugin
has been marked BROKEN since it was introduced in 2009 by
https://git.openwrt.org/?p=openwrt/svn-archive/packages.git;a=commitdiff;h=0de38b88d6ba8c52b8386d3059baba7dca22961f

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 286557e906613757e4b903a8aa4b734682aec85d)

4 years agocollectd: disable dpdk_telemetry module
Hannu Nyman [Mon, 23 Mar 2020 05:58:25 +0000 (07:58 +0200)]
collectd: disable dpdk_telemetry module

Explicitly disable the new dpdk_telemetry module to fix
compilation in buildbot.
(other dpdk modules are aleady disabled)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit b936fc4e0da71df1b8ea17ed6ed3f4eedb664106)

4 years agocollectd: update to 5.11.0
Hannu Nyman [Sun, 22 Mar 2020 20:48:31 +0000 (22:48 +0200)]
collectd: update to 5.11.0

* Update collectd to version 5.11.0
* Refresh patches

Release notes:
https://github.com/collectd/collectd/releases/tag/collectd-5.11.0

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 1d11a0c892d953d7053b4548d957e3ec6a153b99)

4 years agoacme: Backport two bug fixes from master
Toke Høiland-Jørgensen [Thu, 26 Mar 2020 15:37:09 +0000 (16:37 +0100)]
acme: Backport two bug fixes from master

This backports the following bug-fix commits from the master branch:

c6b4d7f367de ("acme: Include empty 'dns' config option by default")
983cc995a3b2 ("acme: Correctly handle domain state dir for ECC certificates")

Fixes #11675.

Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
4 years agoopenvswitch: depend on IPV6 for intree kmods
Yousong Zhou [Wed, 25 Mar 2020 15:04:12 +0000 (23:04 +0800)]
openvswitch: depend on IPV6 for intree kmods

Ref: https://github.com/openwrt/packages/issues/11665
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 88dcd094873dd9d28515cd3408077f4d5574eccb)

4 years agoopenvswitch: rework skipping intree kmod build for unsupported kernels
Yousong Zhou [Thu, 20 Jun 2019 03:22:45 +0000 (03:22 +0000)]
openvswitch: rework skipping intree kmod build for unsupported kernels

This is a workaround to prevent the whole build from failing because of
the intree kmods are not supported yet by upstream project.

Root cause is that kernel version should not play a part when making
DEPENDS as the generated kconfig was for all targets that may have
different kernel versions.

One less than ideal effect of this change is that for an unsupported
kernel version, people can still select the intree kmod but it won't be
built.  This may contradict expectation if the warning was not noticed
by them

Resolves openwrt/packages#9274

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit a6ec885522ced8185cfe66c0ab467d902f043b65)

4 years agofish: update to 3.1.0
Rosen Penev [Wed, 19 Feb 2020 03:32:08 +0000 (19:32 -0800)]
fish: update to 3.1.0

Remove upstreamed patches.

Added missing libatomic dependency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit bee0bfe8621516a776e3e3712348ea0b21cf3dd7)

4 years agofish: Fix compilation with libcxx
Rosen Penev [Sat, 14 Dec 2019 05:51:29 +0000 (21:51 -0800)]
fish: Fix compilation with libcxx

cxxabi.h is a useless header that libcxx does not include.

Remove indent on postint script. It should be on the same as the above
section.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit a135cbb9f1cf568d35e4eb62e154286ab05ccc19)

4 years agofish: Convert to CMake
Rosen Penev [Wed, 20 Nov 2019 05:01:15 +0000 (21:01 -0800)]
fish: Convert to CMake

CMake is faster and allows to simplify the Makefile slightly. It also
creates a slightly smaller package for some reason.

Fixed license information.

Ran postinst through shellcheck. It was using bashisms.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from faa89621783bda6bc1128822aac4995be487a39d)

4 years agosyncthing: configuration cleanup & hardening
Marc Benoit [Mon, 2 Mar 2020 14:31:12 +0000 (09:31 -0500)]
syncthing: configuration cleanup & hardening

Run the service under an unprivileged
user account

The following parameters are now configurable
  niceness
  max concurrency (defaults to number of CPUs)
  user

Added flags "-no-browser"
Disabled in-place upgrades (disabled in the
build already)

Redirected stderr/stdout to syslog

Added support for "reload_config"

Increased "term_timeout" to 15s to give it
plenty of time to shut down gracefully

Properly handled non-existing directories

Removed a softlink that assumes a specific naming
convention in syncthing

Added a comment that using external storage is a
recommend configration

Signed-off-by: Marc Benoit <marcb62185@gmail.com>
[increased package release]
Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit a9443eb0eb9f5f8eacdb1daaa0f30f9deec1853d)
Tested-by: Marc Benoit <marcb62185@gmail.com>
4 years agosyncthing: bump to 1.4.0
Paul Spooren [Tue, 24 Mar 2020 02:34:36 +0000 (16:34 -1000)]
syncthing: bump to 1.4.0

Release information:
https://github.com/syncthing/syncthing/releases/tag/v1.4.0

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 3a651638ce9c45b47e821aed5ea3086ce0290d6f)
Tested-by: Marc Benoit <marcb62185@gmail.com>
4 years agosyncthing: fixup version detection
Paul Spooren [Tue, 24 Mar 2020 02:21:10 +0000 (16:21 -1000)]
syncthing: fixup version detection

Since upstream commit dc92994 the LDFLAGS used for settings the version
(and build host and user) changed resulting in "unknown" versions in
syncthing.

Correct version detection is important for syncthing to assure
compatibility with other running instances. The "unknown" version fails
to communicate and sync with correctly compiled instances.

This patch updates the syncthing Makefile to inject the correct
variables and thereby fixes the version detection in syncthing.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit b85e387cc2dec49ccaf0063f2b109e5c6151de39)
Tested-by: Marc Benoit <marcb62185@gmail.com>
4 years agostrongswan: add conffiles for swanctl util
Sven Roederer [Wed, 25 Mar 2020 11:03:48 +0000 (12:03 +0100)]
strongswan: add conffiles for swanctl util

Add a conffiles-section for the /etc/swanctl folder, which is used by the  swanctl util. This will keep the configfiles during an sysupgrade.

Signed-off-by: Sven Roederer <S.Roederer@colvistec.de>
(cherry picked from commit 49f298eb745000c66169cee4791ca6e587a13ce7)

4 years agostrongswan: quote 'comment' parameter in Config.in
Eneas U de Queiroz [Wed, 18 Mar 2020 12:37:26 +0000 (09:37 -0300)]
strongswan: quote 'comment' parameter in Config.in

Newer versions of the kconfig generator require quotes.  Prepare the
package for an eventual update.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 404c113bc25ac95bf08ba1b904dbbde8875c00eb)

4 years agonet/pagekitec: support status reporting json file
Karl Palsson [Mon, 23 Mar 2020 22:52:31 +0000 (22:52 +0000)]
net/pagekitec: support status reporting json file

Allows luci webapp to report health more dynamically.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>
4 years agonet/pagekitec: Update to newest version
Karl Palsson [Mon, 23 Mar 2020 22:50:53 +0000 (22:50 +0000)]
net/pagekitec: Update to newest version

Drops a patch, adds support for a status file for health tracking.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>
4 years agoMerge pull request #11647 from jefferyto/byobu-5.133-openwrt-19.07
Hannu Nyman [Mon, 23 Mar 2020 19:11:09 +0000 (21:11 +0200)]
Merge pull request #11647 from jefferyto/byobu-5.133-openwrt-19.07

[openwrt-19.07] byobu: Update to 5.133

4 years agoMerge pull request #11646 from jefferyto/python-pyasn1-modules-0.2.8-openwrt-19.07
Hannu Nyman [Mon, 23 Mar 2020 19:10:54 +0000 (21:10 +0200)]
Merge pull request #11646 from jefferyto/python-pyasn1-modules-0.2.8-openwrt-19.07

[openwrt-19.07] python-pyasn1-modules: Update to 0.2.8

4 years agoMerge pull request #11645 from jefferyto/python-idna-2.9-openwrt-19.07
Hannu Nyman [Mon, 23 Mar 2020 19:10:36 +0000 (21:10 +0200)]
Merge pull request #11645 from jefferyto/python-idna-2.9-openwrt-19.07

[openwrt-19.07] python-idna: Update to 2.9

4 years agoMerge pull request #11644 from jefferyto/python-pycparser-2.20-openwrt-19.07
Hannu Nyman [Mon, 23 Mar 2020 19:10:12 +0000 (21:10 +0200)]
Merge pull request #11644 from jefferyto/python-pycparser-2.20-openwrt-19.07

[openwrt-19.07] python-pycparser: Update to 2.20

4 years agoMerge pull request #11643 from jefferyto/python-enum34-1.1.10-openwrt-19.07
Hannu Nyman [Mon, 23 Mar 2020 19:09:57 +0000 (21:09 +0200)]
Merge pull request #11643 from jefferyto/python-enum34-1.1.10-openwrt-19.07

[openwrt-19.07] python-enum34: Update to 1.1.10

4 years agoMerge pull request #11641 from jefferyto/python-zope-interface-4.7.2-openwrt-19.07
Hannu Nyman [Mon, 23 Mar 2020 19:09:08 +0000 (21:09 +0200)]
Merge pull request #11641 from jefferyto/python-zope-interface-4.7.2-openwrt-19.07

[openwrt-19.07] python-zope-interface: Update to 4.7.2, refresh patch

4 years agoMerge pull request #11639 from jefferyto/python-twisted-security-fix-openwrt-19.07
Hannu Nyman [Mon, 23 Mar 2020 19:08:12 +0000 (21:08 +0200)]
Merge pull request #11639 from jefferyto/python-twisted-security-fix-openwrt-19.07

[openwrt-19.07] python-twisted: Fix several request smuggling attacks

4 years agoMerge pull request #11636 from jefferyto/golang-1.13.9-openwrt-19.07
Hannu Nyman [Mon, 23 Mar 2020 19:04:56 +0000 (21:04 +0200)]
Merge pull request #11636 from jefferyto/golang-1.13.9-openwrt-19.07

[openwrt-19.07] golang: Update to 1.13.9

4 years agobyobu: Update to 5.133 11647/head
Jeffery To [Tue, 18 Feb 2020 09:30:41 +0000 (17:30 +0800)]
byobu: Update to 5.133

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 847d9f18ccfcad3ae4911941488057142f91e852)

4 years agopython-pyasn1-modules: Update to 0.2.8 11646/head
Jeffery To [Tue, 14 Jan 2020 21:06:21 +0000 (05:06 +0800)]
python-pyasn1-modules: Update to 0.2.8

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit a6f1e7689b806e3a2baf1446cb8cb547cbc03797)

4 years agopython-idna: Update to 2.9 11645/head
Jeffery To [Sun, 23 Feb 2020 20:45:09 +0000 (04:45 +0800)]
python-idna: Update to 2.9

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 111d7ae088545615aeb453cee20cf5e9f91c82c9)

4 years agopython-pycparser: Update to 2.20 11644/head
Jeffery To [Mon, 16 Mar 2020 14:46:25 +0000 (22:46 +0800)]
python-pycparser: Update to 2.20

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 931dcfe3aa992a9d23323d749a806d9627e88fa7)

4 years agopython-enum34: Update to 1.1.10, refresh patch 11643/head
Jeffery To [Mon, 16 Mar 2020 17:49:24 +0000 (01:49 +0800)]
python-enum34: Update to 1.1.10, refresh patch

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 48af5b2abb2bc3fff18aba9951d274252e7d5c19)

4 years agopython-enum34: Update to 1.1.9, refresh patch
Jeffery To [Sun, 23 Feb 2020 20:43:23 +0000 (04:43 +0800)]
python-enum34: Update to 1.1.9, refresh patch

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 87150b43a8c5328edd7c84f2b51f16c18e0c8dde)

4 years agopython-zope-interface: Update to 4.7.2, refresh patch 11641/head
Jeffery To [Mon, 16 Mar 2020 18:04:38 +0000 (02:04 +0800)]
python-zope-interface: Update to 4.7.2, refresh patch

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit a178662fcef00a1cebbe78253ae28eb1edb418f4)

4 years agopython-twisted: Fix several request smuggling attacks 11639/head
Jeffery To [Mon, 23 Mar 2020 15:22:39 +0000 (23:22 +0800)]
python-twisted: Fix several request smuggling attacks

This backports a patch[1] to fix several request smuggling attacks.

This includes fixes for:
* CVE-2020-10108
* CVE-2020-10109

[1]: https://github.com/twisted/twisted/commit/4a7d22e490bb8ff836892cc99a1f54b85ccb0281

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
4 years agogolang: Update to 1.13.9 11636/head
Jeffery To [Mon, 23 Mar 2020 13:55:51 +0000 (21:55 +0800)]
golang: Update to 1.13.9

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
4 years agolibredblack: pass CFLAGS properly
Josef Schlehofer [Mon, 27 Jan 2020 21:44:00 +0000 (22:44 +0100)]
libredblack: pass CFLAGS properly

Fixes build with enabled ASLR PIE

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit a615a821d949f7e12874b1e0e4deb68ec08af104)

4 years agoMerge pull request #11615 from stangri/19.07-https-dns-proxy
Hannu Nyman [Sat, 21 Mar 2020 07:47:01 +0000 (09:47 +0200)]
Merge pull request #11615 from stangri/19.07-https-dns-proxy

[19.07] https-dns-proxy: support for dnsmasq noresolv option

4 years agoMerge pull request #11617 from nxhack/19_07_icu_66_1
Rosen Penev [Fri, 20 Mar 2020 23:01:09 +0000 (16:01 -0700)]
Merge pull request #11617 from nxhack/19_07_icu_66_1

[openwrt-19.07] icu: update to 66.1 & fix CVE-2020-10531

4 years agohttps-dns-proxy: support for dnsmasq noresolv option 11615/head
Stan Grishin [Fri, 20 Mar 2020 21:22:39 +0000 (21:22 +0000)]
https-dns-proxy: support for dnsmasq noresolv option

Signed-off-by: Stan Grishin <stangri@melmac.net>
4 years agoicu: update to 66.1 11617/head
Hirokazu MORIKAWA [Thu, 19 Mar 2020 07:26:30 +0000 (16:26 +0900)]
icu: update to 66.1

ICU 66 updates to Unicode 13, including new characters, scripts, emoji, and corresponding API constants. It also updates to CLDR 36.1 with Unicode 13 updates and bug fixes.

Create symbolic link to current version.

FIX CVE-2020-10531
 An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
4 years agoyoutube-dl: update to version 2020.3.8
Josef Schlehofer [Sun, 8 Mar 2020 13:16:49 +0000 (14:16 +0100)]
youtube-dl: update to version 2020.3.8

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5d565db22234f72df7f10c874b033de4a9e6bd96)

4 years agohaveged: move init script from 13 to 01
Karel Kočí [Wed, 11 Mar 2020 10:17:33 +0000 (11:17 +0100)]
haveged: move init script from 13 to 01

This is intended as a match with standard urngd. They serve same purpose
and urngd starts as first with 00. Starting haveged later can create
issues if you replace urngd with it. The example problem is if
uci-defaults script decides to generate certificate. Haveged can supply
entropy but it is started later and to mitigate this urngd would still
have to be installed. This means that haveget can't serve as replacement
without moving it to match start order of urngd.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry picked from commit 1ef38f45d982beb46b2df6d3582ad0bc2b0007ca)

4 years agolibarchive: update to 3.4.2
Rosen Penev [Sat, 22 Feb 2020 02:55:13 +0000 (18:55 -0800)]
libarchive: update to 3.4.2

Switch to normal tarballs. Remove autoreconf as a result.

Several Makefile cleanups for consistency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c22dd1bf74fa5836a88fa417b467767bcfe8a4ff)

4 years agoMerge pull request #11566 from BKPepe/python3-update-19.07
Hannu Nyman [Mon, 16 Mar 2020 18:22:12 +0000 (20:22 +0200)]
Merge pull request #11566 from BKPepe/python3-update-19.07

[19.07] python3: update to version 3.7.7

4 years agoopenvswitch: fix PIE build against 4.14 kernel
Yousong Zhou [Mon, 16 Mar 2020 07:25:51 +0000 (15:25 +0800)]
openvswitch: fix PIE build against 4.14 kernel

Reported-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Ref: https://github.com/openwrt/packages/pull/11567
(cherry picked from commit e9d6414437d27803a16b5d96c48b45140e989e5e)

4 years agox264: add CONFIGURE_VARS and MAKE_FLAGS when NASM is not selected
Josef Schlehofer [Mon, 2 Mar 2020 22:59:10 +0000 (23:59 +0100)]
x264: add CONFIGURE_VARS and MAKE_FLAGS when NASM is not selected

- Remove dot in TITLE
- Use HTTPS in URL

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit faac2352e2d3f14de8dfd69f1801e6561ccb156c)

4 years agonfs-kernel-server: Fix compile with uClibc-ng
Rosen Penev [Tue, 25 Jun 2019 17:45:58 +0000 (10:45 -0700)]
nfs-kernel-server: Fix compile with uClibc-ng

NS_MAXMSG is not defined.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 732b1c4c0e1203cf3f07459694680a6a830a6d71)

4 years agoxtables-addons: disable ASLR PIE
Martin Schiller [Thu, 14 Nov 2019 07:27:05 +0000 (08:27 +0100)]
xtables-addons: disable ASLR PIE

This package uses ld for linking and therefor does not support the
-specs option.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>
(cherry picked from commit 3804006e60579ed9f44c5b315d186ed364f04455)

4 years agopython3: update to version 3.7.7 11566/head
Josef Schlehofer [Fri, 13 Mar 2020 23:47:42 +0000 (00:47 +0100)]
python3: update to version 3.7.7

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
4 years agodjango: bump to version 1.11.29 11553/head
Alexandru Ardelean [Wed, 11 Mar 2020 07:28:31 +0000 (09:28 +0200)]
django: bump to version 1.11.29

Includes several CVE fixes.
- CVE-2020-7471 in 1.11.28
- CVE-2020-9402 in 1.11.29

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
4 years agoMerge pull request #11540 from neheb/softee
Rosen Penev [Wed, 11 Mar 2020 03:29:30 +0000 (20:29 -0700)]
Merge pull request #11540 from neheb/softee

[19.07]softethervpn: Update to rtm version 4.29-9680

4 years agosoftethervpn: disable PIC 11540/head
Rosen Penev [Mon, 9 Mar 2020 20:53:17 +0000 (13:53 -0700)]
softethervpn: disable PIC

Compilation is broken on AArch64.

Reordered some things for consistency between packages.

Fixed license information.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b8b4e7e2694bb9b6e678f1b06bbe793c9bde0535)

4 years agosoftethervpn: Fix openssl header patch
Rosen Penev [Sat, 7 Sep 2019 02:51:05 +0000 (19:51 -0700)]
softethervpn: Fix openssl header patch

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 41fe5a8335dee6e59e3053feb3667d718517fb88)

4 years agosoftethervpn: Add missing OpenSSL header
Rosen Penev [Sun, 11 Aug 2019 23:21:51 +0000 (16:21 -0700)]
softethervpn: Add missing OpenSSL header

Fixes compilation without OpenSSL deprecated APIs as well as
-Werror=implicit-function-declaration.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b80b614f8f659e352723a49cc4459521049198ab)

4 years agosoftethervpn: Update to rtm version 4.29-9680
Philipp Schuster [Fri, 12 Jul 2019 02:13:03 +0000 (04:13 +0200)]
softethervpn: Update to rtm version 4.29-9680

Update SoftEther VPN to the latest rtm version 4.29-9680

Compile tested: Atheros AR7xxx/AR9xxx, TP-LINK Archer C7 v2, 18.06.4

Signed-off-by: Philipp Schuster <philippschuster@gmx.com>
(rebased and refreshed patches).
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 34db38520b879ba8dcf637d2f8bdb365e545b5bb)

4 years agostubby: fix init script
Rosen Penev [Thu, 27 Feb 2020 03:47:59 +0000 (19:47 -0800)]
stubby: fix init script

The configuration file was not being generated.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b95699c6475795ae4d500a43a7cd382de655ec3f)

4 years agostubby: makefile and init script cleanup
Rosen Penev [Fri, 21 Feb 2020 23:26:34 +0000 (15:26 -0800)]
stubby: makefile and init script cleanup

Reordered Makefile according to
https://github.com/openwrt/packages/pull/9399#issuecomment-508727872 .

Added PKG_BUILD_PARALLEL for faster compilation.

Remove duplicated conffiles section.

Install /etc/config/stubby using INSTALL_CONF, as is done elsewhere

Run init script through shellcheck and clean it up.

Added chmod for the stubby config file, to fix a LuCI issue.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit eaf522532324f9155d2d038e27006e5caaf9874a)

4 years agobtrfs-progs: fix check for btrfs in btrfs scan 11538/head
Karel Kočí [Mon, 9 Mar 2020 14:29:16 +0000 (15:29 +0100)]
btrfs-progs: fix check for btrfs in btrfs scan

The previous implementation always succeeded so no scan was performed.
This now fixes that and it correctly scans for BTRFS  devices if BTRFS
support is in kernel.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
4 years agosyslog-ng: update to version 3.26.1
Josef Schlehofer [Sat, 7 Mar 2020 08:54:13 +0000 (09:54 +0100)]
syslog-ng: update to version 3.26.1

- Bump version also in the config file
- Move logread to /sbin location instead of /usr/sbin
Because package logd in OpenWrt's ubox Makefile uses /sbin folder and LuCI has
the same path hardcoded in
modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json and using
different location results that LuCI is not able to load log data as it
is not found.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit fe165eeb94d2e7fb35fee93e64336afa024a1283)

4 years agoMerge pull request #11526 from wvdakker/openwrt-19.07
Hannu Nyman [Sat, 7 Mar 2020 13:51:09 +0000 (15:51 +0200)]
Merge pull request #11526 from wvdakker/openwrt-19.07

[Openwrt 19.07] Shorewall: Bump to 5.2.3.7

4 years agoMerge pull request #11524 from micmac1/1907arc_aio2
Rosen Penev [Sat, 7 Mar 2020 10:18:23 +0000 (02:18 -0800)]
Merge pull request #11524 from micmac1/1907arc_aio2

[19.07] mariadb: add dependency on libaio for arc as well

4 years agoShorewall6: Bump to 5.2.3.7. 11526/head
W. van den Akker [Sat, 7 Mar 2020 09:28:10 +0000 (10:28 +0100)]
Shorewall6: Bump to 5.2.3.7.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
4 years agoShorewall: Bump to 5.2.3.7.
W. van den Akker [Sat, 7 Mar 2020 09:27:15 +0000 (10:27 +0100)]
Shorewall: Bump to 5.2.3.7.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
4 years agoShorewall6-lite: Bump to 5.2.3.7.
W. van den Akker [Sat, 7 Mar 2020 09:19:15 +0000 (10:19 +0100)]
Shorewall6-lite: Bump to 5.2.3.7.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
4 years agoShorewall-lite: Bump to 5.2.3.7.
W. van den Akker [Sat, 7 Mar 2020 09:17:52 +0000 (10:17 +0100)]
Shorewall-lite: Bump to 5.2.3.7.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
4 years agoShorewall-core: Bump to 5.2.3.7.
W. van den Akker [Sat, 7 Mar 2020 09:16:01 +0000 (10:16 +0100)]
Shorewall-core: Bump to 5.2.3.7.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
4 years agomariadb: add dependency on libaio for arc as well 11524/head
Sebastian Kemper [Mon, 24 Jun 2019 08:36:20 +0000 (10:36 +0200)]
mariadb: add dependency on libaio for arc as well

Now that libaio compiles on arc targets we need to add the dependency to
libaio on these targets as well.

resolves #9298

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
4 years agoyoutube-dl: update to version 2020.3.6
Josef Schlehofer [Fri, 6 Mar 2020 03:43:45 +0000 (04:43 +0100)]
youtube-dl: update to version 2020.3.6

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
4 years agoyoutube-dl: update to version 2020.3.1
Josef Schlehofer [Sun, 1 Mar 2020 13:34:18 +0000 (14:34 +0100)]
youtube-dl: update to version 2020.3.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
4 years agoMerge pull request #11501 from Bloup1net/phantap19.07
Etienne Champetier [Thu, 5 Mar 2020 01:25:07 +0000 (20:25 -0500)]
Merge pull request #11501 from Bloup1net/phantap19.07

phantap: add to 19.07

4 years agolibuv: update to 1.34.2
Hirokazu MORIKAWA [Wed, 4 Mar 2020 05:14:00 +0000 (14:14 +0900)]
libuv: update to 1.34.2

https://github.com/openwrt/packages/pull/11320#issuecomment-594032207

luv, libwebsockets, ttyd, netdata are build OK.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
4 years agocgi-io: fix compilation against uClibc
Jo-Philipp Wich [Thu, 27 Feb 2020 11:38:15 +0000 (12:38 +0100)]
cgi-io: fix compilation against uClibc

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit ed965cf16fd9ee6a798322b7b73f8c509295f19d)

4 years agocgi-io: use O_TMPFILE for uploads and attempt to directly link target file
Jo-Philipp Wich [Fri, 21 Feb 2020 23:13:32 +0000 (00:13 +0100)]
cgi-io: use O_TMPFILE for uploads and attempt to directly link target file

Create an anonymous inode in /tmp using O_TMPFILE and attempt to link the
file in place using linkat(). Only fall back to the old file copy when
linking the tempfile fails.

Avoids double memory use if both the temporary upload file and the
destination file are located in /tmp.

Ref: https://github.com/openwrt/luci/issues/3654
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 4f4a7e9532e55a16336b79b74b5fb0236e365279)

4 years agocgi-io: use dynamic memory for post decoding, support proc files
Jo-Philipp Wich [Mon, 10 Feb 2020 17:19:34 +0000 (18:19 +0100)]
cgi-io: use dynamic memory for post decoding, support proc files

Allocate dynamic buffer memory for decoding post data and allow post
requsts up to 128KB compared to the previos 1KB limit.

Also support downloading /proc and /sys files by falling back to
chunked transfer encoding when the file size cannot be determined.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 39087eba18011ca1e064c8e356ee33533be760db)

4 years agoMerge pull request #11500 from fantom-x/irqbalance-backport
Hannu Nyman [Wed, 4 Mar 2020 05:24:10 +0000 (07:24 +0200)]
Merge pull request #11500 from fantom-x/irqbalance-backport

Irqbalance: backport to 19.07

4 years agoirqbalance: support reload_config & start later 11500/head
Marc Benoit [Tue, 3 Mar 2020 12:48:27 +0000 (07:48 -0500)]
irqbalance: support reload_config & start later

Added support for reload_config

This service does not need to start so early (even
before the netwrok is up). Start it after
the device is mostly up and operational.

Compile-tested on: ipq806x
Runtime-tested on: ipq806x

Signed-off-by: Marc Benoit <marcb62185@gmail.com>
(cherry picked from commit b6078559cdd47b4def5bb44dd46759a8591f3e4f)

4 years agoirqbalance: add support of interval and banirq
Marc Benoit [Sun, 23 Feb 2020 22:53:11 +0000 (17:53 -0500)]
irqbalance: add support of interval and banirq

Added the ability to change sampling interval
and provide a list of IRQ's to ignore
via /etc/config/irqbalance

Signed-off-by: Marc Benoit <marcb62185@gmail.com>
(cherry picked from commit b7a99b2334e6c69615dc34f93015b8c3ace382c2)

4 years agoirqbalance: upgrade to 1.6.0
Marc Benoit [Mon, 24 Feb 2020 23:16:58 +0000 (18:16 -0500)]
irqbalance: upgrade to 1.6.0

Upgraded from 1.2.0 to 1.6.0 to pick up
all the latest fixes and improvements

irqbalance made glib2 mandatory since 1.3.0, but is
using very little of it. glib2 linked statically
to minimize the impact.

1.2.0 size: 33,619
1.6.0 size: 99,539

~# irqbalance --version
irqbalance version 1.6.0

~# ldd /usr/sbin/irqbalance
/lib/ld-musl-armhf.so.1 (0xb6f5f000)
libgcc_s.so.1 => /lib/libgcc_s.so.1 (0xb6f43000)
libc.so => /lib/ld-musl-armhf.so.1 (0xb6f5f000)

~# opkg info irqbalance
Package: irqbalance
Version: 1.6.0-6
Depends: libc
Status: install user installed
Architecture: arm_cortex-a7_neon-vfpv4
Installed-Time: 1582839249

Compile-tested: ipq806x/R7800 & ipq40xx/GL-B1300
Run-tested:     ipq806x/R7800 & ipq40xx/GL-B1300

Signed-off-by: Marc Benoit <marcb62185@gmail.com>
(cherry picked from commit bdcb872a40e4567bc57c45299a0df5efad65207f)

4 years agophantap: add to 19.07 11501/head
Diana Dragusin [Tue, 3 Mar 2020 11:42:33 +0000 (03:42 -0800)]
phantap: add to 19.07

Signed-off-by: Diana Dragusin <diana.dragusin@nccgroup.com>
4 years agoMerge pull request #11482 from BKPepe/libaio_update
Rosen Penev [Mon, 2 Mar 2020 20:02:01 +0000 (12:02 -0800)]
Merge pull request #11482 from BKPepe/libaio_update

[OpenWrt 19.07] libaio: Update to 0.3.112

4 years agolibaio: Update to 0.3.112 11482/head
Rosen Penev [Tue, 18 Jun 2019 18:02:47 +0000 (11:02 -0700)]
libaio: Update to 0.3.112

Replace inactive maintainer with myself.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7cd204e99e564ea9c19e2e1b50e7088ffc5252a8)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[compile tested on powerpc_8540]

4 years agomosquitto: bump to 1.6.9
Karl Palsson [Mon, 2 Mar 2020 10:04:06 +0000 (10:04 +0000)]
mosquitto: bump to 1.6.9

Full changelog: https://mosquitto.org/blog/2020/02/version-1-6-9-released/

Nothing of particular relevant to OpenWrt, just general fixes.

Signed-off-by: Karl Palsson <karlp@etactica.com>
4 years agosyncthing: enable via config, lower priority, cleanup
Marc Benoit [Sun, 1 Mar 2020 17:30:06 +0000 (12:30 -0500)]
syncthing: enable via config, lower priority, cleanup

Added the ability to enable/disable via a config file;
the default is enabled for backwards compatibility.

This is an additional service, so running it the
same priority as dnsmasq, etc does not make sense.

Added USE_PROCD=1

"done" starts at "START=95", so this should start earlier

Added STOP=10 to stop syncthing early

Compile-tested on: ipq806x, ipq40xx
Runtime-tested on: ipq806x, ipq40xx

Signed-off-by: Marc Benoit <marcb62185@gmail.com>
(cherry picked from commit 6f6877460a775a75f16154f2d75944bf91770f0d)