feed/packages.git
3 years agosane-backends: use macros (properly), remove chmod 16147/head
Sebastian Kemper [Sat, 17 Jul 2021 12:03:40 +0000 (14:03 +0200)]
sane-backends: use macros (properly), remove chmod

- use $(INSTALL_DIR) instead of mkdir
- using $(INSTALL_CONF) and then running chmod is pointless, use
  $(INSTALL_DATA) directly
- /etc/xinetd.d/sane-port doesn't need read protection from non-root
  users, use $(INSTALL_DATA) as well

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit f37006c2e641882dde01512f8a035bf42c6f46b8)

3 years agosane-backends: fix usbid file generation
Sebastian Kemper [Sat, 17 Jul 2021 11:55:46 +0000 (13:55 +0200)]
sane-backends: fix usbid file generation

On some build systems (build bots, Debian Buster for example) the
current mechanism in the Build/Install define doesn't run. Replace it
with shell fu that works.

Issue was reported, see [1].

[1] https://github.com/openwrt/packages/issues/16085

Fixes #16085

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 977109e28613820ff451908289ff6e4cc671ec32)

3 years agostress-ng: bump to version 0.12.10
Alexandru Ardelean [Mon, 24 May 2021 16:21:05 +0000 (19:21 +0300)]
stress-ng: bump to version 0.12.10

Patch `010-soft-float.patch` can be dropped.
It was upstreamed via https://github.com/ColinIanKing/stress-ng/pull/126

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 6f48074e79fd5185798d2bf60583313d93cfde6c)

3 years agostress-ng: bump to version 0.12.07
Alexandru Ardelean [Wed, 28 Apr 2021 07:39:11 +0000 (10:39 +0300)]
stress-ng: bump to version 0.12.07

Refreshed patch.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 96692fa6c181db11bc4b72e073c52b025cbd4c98)

3 years agostress-ng: bump to version 0.12.06
Alexandru Ardelean [Mon, 29 Mar 2021 08:51:51 +0000 (11:51 +0300)]
stress-ng: bump to version 0.12.06

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 940492c577b9f6c36e3f4f4b9ed8c75586871348)

3 years agostress-ng: bump to version 0.12.04
Alexandru Ardelean [Mon, 8 Mar 2021 10:04:53 +0000 (12:04 +0200)]
stress-ng: bump to version 0.12.04

Refreshed patch.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 987c82cc73c3dca39658b36dc3a791aae4cb4d54)

3 years agoruby: update to 3.0.2
Luiz Angelo Daros de Luca [Thu, 15 Jul 2021 16:56:52 +0000 (13:56 -0300)]
ruby: update to 3.0.2

This release fixes some bugs and these vulnerabilities:

* CVE-2021-31810: Trusting FTP PASV responses vulnerability in Net::FTP
* CVE-2021-32066: A StartTLS stripping vulnerability in Net::IMAP
* CVE-2021-31799: A command injection vulnerability in RDoc

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit 1b41e8f641b612e3738ba391cf3ee97d0b8ff288)

3 years agoMerge pull request #16119 from commodo/python-updates1-21.02
Rosen Penev [Thu, 15 Jul 2021 18:44:35 +0000 (11:44 -0700)]
Merge pull request #16119 from commodo/python-updates1-21.02

[21.02] python-{simplejson,cffi}: bump versions

3 years agoMerge pull request #16125 from jefferyto/addrwatch-fixes-openwrt-21.02
Rosen Penev [Thu, 15 Jul 2021 18:42:00 +0000 (11:42 -0700)]
Merge pull request #16125 from jefferyto/addrwatch-fixes-openwrt-21.02

[openwrt-21.02] addrwatch: Various fixes

3 years agoMerge pull request #16128 from 1715173329/yq-2102
Rosen Penev [Thu, 15 Jul 2021 18:41:42 +0000 (11:41 -0700)]
Merge pull request #16128 from 1715173329/yq-2102

[openwrt-21.02] yq: Update to 4.9.8

3 years agodawn: update to 2021-07-11
Nick Hainke [Sun, 11 Jul 2021 12:01:14 +0000 (14:01 +0200)]
dawn: update to 2021-07-11

ec9a3a9 fix GCC11 compilation

Thanks to neheb and cotequeiroz.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit ee4616fb43b489003cab957e3a2d6f5f14c6fb97)

3 years agodawn: update to 2021-07-08
Nick Hainke [Thu, 8 Jul 2021 14:45:55 +0000 (16:45 +0200)]
dawn: update to 2021-07-08

555268b ubus: filter neighbors by SSID when preparing nr
3db9607 data storage: match SSID when searching ap entry
a22f5a7 storage: ensure SSID strings are NULL-terminated

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 163ccbf0236824b29fd2158d3a287dda5e427b00)

3 years agoyq: Update to 4.9.8 16128/head
Tianling Shen [Thu, 15 Jul 2021 09:24:46 +0000 (17:24 +0800)]
yq: Update to 4.9.8

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 855e5b6eb5f84fe8463623cde279d561f5b00264)

3 years agoaddrwatch: Various fixes 16125/head
Jeffery To [Fri, 18 Jun 2021 08:33:55 +0000 (16:33 +0800)]
addrwatch: Various fixes

Makefile changes include:

* Remove USE_UCLIBC, as uclibc is no longer supported

* Package output modules

* Move main binary (back) to /usr/sbin, as it is system administration
  related and requires superuser privileges

New patches:

* 003-add-space-for-null-byte.patch - from
  https://github.com/fln/addrwatch/commit/374cfd2cabe4db9882d8a210adff430cc579f859

* 004-more-specific-library-linking.patch - from
  https://github.com/fln/addrwatch/commit/27b57d9da322fc16c6904d8e35aae4557a3e517b

* 005-use-c99-format-macro-constants.patch - from
  https://github.com/fln/addrwatch/pull/28

Init script changes include:

* Change from explicit disable to explicit enable, so that the service
  is disabled by default and on first install

* Set config option default values to default values of the main binary

* Fix command-line option names and format (from
  https://forum.openwrt.org/t/cant-start-addrwatch-service/60499/3)

* Always use the --quiet command-line option, as the procd instance is
  not configured to capture stdout/stderr

* Change the syslog config option to start the syslog output module

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 31ae85bca963ce240c9e1b8df55294587b079161)

3 years agoyggdrasil: allow HTTPS connections
James Vorderbruggen [Sun, 13 Jun 2021 16:09:57 +0000 (12:09 -0400)]
yggdrasil: allow HTTPS connections

Signed-off-by: James Vorderbruggen <jamesvorder@gmail.com>
(cherry picked from commit ffff3473966c42133b8faed7d8a120739c5451d4)

3 years agoyggdrasil: bump to 0.3.16
George Iv [Sun, 28 Mar 2021 17:39:44 +0000 (13:39 -0400)]
yggdrasil: bump to 0.3.16

Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>
(cherry picked from commit 76b642b50ff8a606780c43eef2bb030a60dcdb17)

3 years agopython-cffi: bump to version 1.14.6 16119/head
Alexandru Ardelean [Tue, 13 Jul 2021 08:20:08 +0000 (11:20 +0300)]
python-cffi: bump to version 1.14.6

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit e08b94b7538474812c18fc109f0372bbb2710d1f)

3 years agopython-simplejson: bump to version 3.17.3
Alexandru Ardelean [Tue, 13 Jul 2021 08:13:23 +0000 (11:13 +0300)]
python-simplejson: bump to version 3.17.3

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 3f2d7052743500e993a5f4a39cef0dc0eaac4d60)

3 years agoopenvpn: enable LZO support by default for OpenSSL variant
Etienne Champetier [Sun, 4 Jul 2021 18:14:30 +0000 (14:14 -0400)]
openvpn: enable LZO support by default for OpenSSL variant

User that don't control both OpenVPN client and server
might still need LZO support, so keep it enable by default for at least
OpenSSL variant.

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 03c3c924965a74b650a45394cc424b4d02f333f1)

3 years agosyslog-ng: disable mqtt
Josef Schlehofer [Mon, 12 Jul 2021 14:14:31 +0000 (16:14 +0200)]
syslog-ng: disable mqtt

For now, disable mqtt as it was automatically enabled as the build
system finds compiled libpaho-mqtt-c and requires dependency.

---
Here is the output:
Package syslog-ng is missing dependencies for the following libraries:
libpaho-mqtt3c.so.1
---

This is a new feature since syslog-ng 3.33.1 and if anyone is interested
in it, it can be enabled.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e319e89fde0f3c6b3c8ecfffe9bd759c9a44ac15)

3 years agomwan3: bump PKG_VERSION to 2.10.11
Florian Eckert [Wed, 7 Jul 2021 15:16:41 +0000 (17:16 +0200)]
mwan3: bump PKG_VERSION to 2.10.11

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 44d79147ea9d75bb4a5488bf2f600d9c76561e60)

3 years agomwan3: add troublshoot command from LuCI
Florian Eckert [Mon, 5 Jul 2021 14:15:02 +0000 (16:15 +0200)]
mwan3: add troublshoot command from LuCI

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 619b721c2f9b0b1c88f9fde7da75c9e37a060a47)

3 years agomwan3: cleanup help output
Florian Eckert [Mon, 5 Jul 2021 09:26:37 +0000 (11:26 +0200)]
mwan3: cleanup help output

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit a9dac71e3d7f2d46f7d051cb8ffe235c49177848)

3 years agosyslog-ng: update to version 3.33.1
Josef Schlehofer [Sun, 11 Jul 2021 18:16:47 +0000 (20:16 +0200)]
syslog-ng: update to version 3.33.1

- Release notes:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.33.1

- Bump version in config
It fixes:
WARNING: Configuration file format is too old, syslog-ng is running in compatibility mode. Please update it to use the syslog-ng 3.33 format at your time of convenience. To upgrade the configuration, please review the warnings about incompatible changes printed by syslog-ng, and once completed change the @version header at the top of the configuration file; config-version='3.31'

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 2b4be08a8c4fbe3d6dec90b91726375e9b38db61)

3 years agoMerge pull request #16088 from turris-cz/21.02/lxc-change-gpgkeyserver
Josef Schlehofer [Sun, 11 Jul 2021 18:44:19 +0000 (20:44 +0200)]
Merge pull request #16088 from turris-cz/21.02/lxc-change-gpgkeyserver

lxc: add patch to switch GPG server

3 years agoapache: update to 2.4.48
Rosen Penev [Wed, 16 Jun 2021 01:36:03 +0000 (18:36 -0700)]
apache: update to 2.4.48

Refreshed patch.

Fixes:

CVE-2019-17567
CVE-2020-13938
CVE-2020-13950
CVE-2020-35452
CVE-2021-26690
CVE-2021-26691
CVE-2021-30641
CVE-2021-31618

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 6dfd07097de4e737444cf70c62d34453bbf84f7a)

3 years agoMerge pull request #16093 from Andy2244/samba-4.14.5_(21)
Rosen Penev [Sun, 11 Jul 2021 07:10:49 +0000 (00:10 -0700)]
Merge pull request #16093 from Andy2244/samba-4.14.5_(21)

[21.02] samba4: update to 4.14.5

3 years agoMerge pull request #16092 from Andy2244/libtirpc-1.3.2_-21]
Rosen Penev [Sun, 11 Jul 2021 07:10:44 +0000 (00:10 -0700)]
Merge pull request #16092 from Andy2244/libtirpc-1.3.2_-21]

[21.02] libtirpc: update to 1.3.2

3 years agoMerge pull request #16091 from Andy2244/rpcbind-1.2.6_-21]
Rosen Penev [Sun, 11 Jul 2021 07:10:36 +0000 (00:10 -0700)]
Merge pull request #16091 from Andy2244/rpcbind-1.2.6_-21]

[21.02] rpcbind: update to 1.2.6

3 years agoMerge pull request #16090 from Andy2244/softethervpn-5.02.5180_(21)
Rosen Penev [Sun, 11 Jul 2021 07:10:32 +0000 (00:10 -0700)]
Merge pull request #16090 from Andy2244/softethervpn-5.02.5180_(21)

[21.02] softethervpn5: update to 5.02.5180

3 years agoMerge pull request #16094 from Andy2244/wsdd2-git-2021-06-28_(21)
Rosen Penev [Sun, 11 Jul 2021 07:10:26 +0000 (00:10 -0700)]
Merge pull request #16094 from Andy2244/wsdd2-git-2021-06-28_(21)

[21.02] wsdd2: update to git 2021-06-28

3 years agotransmission: add new syscalls to seccomp filter
Daniel Golle [Fri, 9 Jul 2021 01:12:00 +0000 (02:12 +0100)]
transmission: add new syscalls to seccomp filter

Testing showed that additional syscalls are needed on ARMv7.
Add "getegid32", "geteuid32", "getgid32" and "getrandom" as they are
all innocent.
Bump PKG_RELEASE.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 1141ee1e5163d0882c0c8ab00c200b797b1ac85f
and commit a78e527012dd0b772bcfbda980b17575410edffd)

3 years agonetdata: update to version 1.30.1
Josef Schlehofer [Wed, 14 Apr 2021 22:39:03 +0000 (00:39 +0200)]
netdata: update to version 1.30.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 1d532fa545eef1ebd3ebef6ab41dfd709ad991e1)

3 years agowsdd2: update to git 2021-06-28 16094/head
Andy Walsh [Sat, 10 Jul 2021 19:11:11 +0000 (21:11 +0200)]
wsdd2: update to git 2021-06-28

* update to git 2021-06-28
* add extra startup delay

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
3 years agosamba4: update to 4.14.5 16093/head
Andy Walsh [Sat, 10 Jul 2021 19:09:29 +0000 (21:09 +0200)]
samba4: update to 4.14.5

* update to 4.14.5
* refresh patches

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
3 years agosoftethervpn5: update to 5.02.5180 16090/head
Andy Walsh [Sat, 10 Jul 2021 19:07:47 +0000 (21:07 +0200)]
softethervpn5: update to 5.02.5180

* update to 5.02.5180
* add dep: libsodium

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
3 years agorpcbind: update to 1.2.6 16091/head
Andy Walsh [Sat, 10 Jul 2021 18:56:50 +0000 (20:56 +0200)]
rpcbind: update to 1.2.6

* update to 1.2.6
* remove upstream merged patch

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
3 years agolibtirpc: update to 1.3.2 16092/head
Andy Walsh [Sat, 10 Jul 2021 18:54:53 +0000 (20:54 +0200)]
libtirpc: update to 1.3.2

* update to 1.3.2

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
3 years agolxc: add patch to switch GPG server 16088/head
Josef Schlehofer [Sat, 10 Jul 2021 14:33:08 +0000 (16:33 +0200)]
lxc: add patch to switch GPG server

By default, there was used sks-keyservers.net pool, which has invalid
SSL certificate and they also announced that their service is deprecate
and no longer maintained.

Use the same GPG server as LXC is using by default in the newer
releases.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
3 years agoMerge pull request #16065 from 1715173329/yq-2102
Josef Schlehofer [Thu, 8 Jul 2021 04:22:32 +0000 (06:22 +0200)]
Merge pull request #16065 from 1715173329/yq-2102

[openwrt-21.02] yq: Update to 4.9.7

3 years agoyq: Update to 4.9.7 16065/head
Tianling Shen [Wed, 7 Jul 2021 12:28:06 +0000 (20:28 +0800)]
yq: Update to 4.9.7

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit faf915e97d070d05c5a27654ebb07389123f26e7)

3 years agoMerge pull request #16050 from nxhack/2102_libuv_CVE-2021-22918
Rosen Penev [Wed, 7 Jul 2021 06:02:17 +0000 (23:02 -0700)]
Merge pull request #16050 from nxhack/2102_libuv_CVE-2021-22918

[21.02] libuv: fix CVE-2021-22918

3 years agopython3: do a simple ls on pip & setuptools if not selected for build
Alexandru Ardelean [Mon, 5 Jul 2021 08:28:38 +0000 (11:28 +0300)]
python3: do a simple ls on pip & setuptools if not selected for build

I seem to forget to check/select setuptools and pip (that come bundled with
Python).
This change will do a simple 'ls' on the 2 wheel files, so that the build
fails even if just building Python.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
3 years agopython3: update to version 3.9.6
Alexandru Ardelean [Mon, 5 Jul 2021 06:28:07 +0000 (09:28 +0300)]
python3: update to version 3.9.6

Refreshed patches.
Bumped pip to 21.1.3.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 44e009364f5a115172f5825fbfd8c0b3730021a5)

3 years agomwan3: use default routes from additional tables
Daniel Golle [Sat, 3 Jul 2021 14:04:33 +0000 (15:04 +0100)]
mwan3: use default routes from additional tables

Until now the additional tables listed in gobal 'rt_table_lookup' were
not considered for interfaces.
In order to be able to also use interface-defined routes from tables
other than main, consider also tables listed in 'rt_table_lookup'.
Update version to 2.10.10 as requested by maintainer.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit cb02b42007878147b514b1cb86246bfa09615d35)

3 years agolibuv: fix CVE-2021-22918 16050/head
Hirokazu MORIKAWA [Tue, 6 Jul 2021 05:02:43 +0000 (14:02 +0900)]
libuv: fix CVE-2021-22918

idna: fix OOB read in punycode decoder

libuv was vulnerable to out-of-bounds reads in the uv__idna_toascii()
function which is used to convert strings to ASCII. This is called by
the DNS resolution function and can lead to information disclosures or
crashes.

https://github.com/libuv/libuv/commit/b7466e31e4bee160d82a68fca11b1f61d46debae
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=990561
https://nodejs.org/en/blog/vulnerability/july-2021-security-releases/

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
3 years agoMerge pull request #16015 from DeathCamel58/openconnect-backport-iconv/intl-fixes
Nikos Mavrogiannopoulos [Mon, 5 Jul 2021 17:43:08 +0000 (19:43 +0200)]
Merge pull request #16015 from DeathCamel58/openconnect-backport-iconv/intl-fixes

openconnect: backport iconv/intl fix

3 years agoMerge pull request #16042 from commodo/django-bump-21.02
Rosen Penev [Mon, 5 Jul 2021 09:54:56 +0000 (02:54 -0700)]
Merge pull request #16042 from commodo/django-bump-21.02

[21.02] django: bump to version 3.2.5

3 years agodjango: bump to version 3.2.5 16042/head
Alexandru Ardelean [Mon, 5 Jul 2021 07:35:41 +0000 (10:35 +0300)]
django: bump to version 3.2.5

Several bug-fixes.
Fix CVE-2021-35042

Release notes:
  https://docs.djangoproject.com/en/3.2/releases/3.2.5/

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 3ee863421a675c41848261a17df145716a23d907)

3 years agoMerge pull request #16013 from commodo/python-dateutil-21.02
Rosen Penev [Sat, 3 Jul 2021 22:16:37 +0000 (15:16 -0700)]
Merge pull request #16013 from commodo/python-dateutil-21.02

[21.02] python-dateutil: add setuptools-scm build dep

3 years agoMerge pull request #16024 from rs/nextdns-1.34.2-openwrt-21.02
Rosen Penev [Sat, 3 Jul 2021 22:15:37 +0000 (15:15 -0700)]
Merge pull request #16024 from rs/nextdns-1.34.2-openwrt-21.02

[21.02] nextdns: Update to version 1.34.2

3 years agonextdns: Update to version 1.34.2 16024/head
Olivier Poitrey [Fri, 2 Jul 2021 18:54:54 +0000 (18:54 +0000)]
nextdns: Update to version 1.34.2

Signed-off-by: Olivier Poitrey <rs@nextdns.io>
3 years agotessdata: uncompress tarball only once to speed up builds
Baptiste Jonglez [Wed, 30 Jun 2021 12:09:42 +0000 (14:09 +0200)]
tessdata: uncompress tarball only once to speed up builds

The previous approach was to uncompress N times a big tarball (638 MB)
where N=130 is the number of supported languages.  Each iteration would
only extract a single file, but it still needs to uncompress the whole
tarball.  This is of course completely inefficient.

Now, we uncompress the tarball only once to extract all relevant files,
and then iterate N times to copy the file needed for each language.

This massively speeds up builds, at the expense of temporarily requiring
more build space (about 1 GB more)

Signed-off-by: Baptiste Jonglez <git@bitsofnetworks.org>
(cherry picked from commit 7fe513971f4139a52c22bae36097c950731b56f2)

3 years agotessdata: update to 2.1.0
Rosen Penev [Mon, 15 Mar 2021 02:31:02 +0000 (19:31 -0700)]
tessdata: update to 2.1.0

Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 37bffba07477a7a7cccddb55adeea4e2c8ae2438)

3 years agoopenconnect: backport iconv/intl fix 16015/head
Dylan Corrales [Fri, 2 Jul 2021 16:11:03 +0000 (12:11 -0400)]
openconnect: backport iconv/intl fix

This was pulled from #14741. #14734 affects me as well on Debian 11.

Signed-off-by: Dylan Corrales <deathcamel58@gmail.com>
3 years agopython-dateutil: add setuptools-scm build dep 16013/head
Alexandru Ardelean [Wed, 30 Jun 2021 14:30:41 +0000 (17:30 +0300)]
python-dateutil: add setuptools-scm build dep

Following:
  https://github.com/openwrt/packages/pull/16004
  https://github.com/openwrt/packages/pull/15995
  https://github.com/openwrt/packages/issues/15988

It seems that dateutil requires setuptools-scm to be installed.
As such, this is being added as a dependency.

Also, bump setuptools-scm to version 6.0.1

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit e2026346cceeb54216090a75c83d527f8c51f321)

3 years agoadblock: update 4.1.3-2
Dirk Brenken [Tue, 29 Jun 2021 19:03:33 +0000 (21:03 +0200)]
adblock: update 4.1.3-2

* add a tcpdump option to resolve IPs in adblock reporting,
  set 'adb_represolve' accordingly (disabled by default). If enabled
  tcpdump will perform a reverse DNS (PTR) lookup for each IP address
* add 'stalkerware' source (provided by @astryzia)
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit e5fd19d2e0981710b0a57b0f8528013203d2bbc6)

3 years agocrun: update to 0.20
Oskari Rauta [Tue, 8 Jun 2021 00:15:15 +0000 (03:15 +0300)]
crun: update to 0.20

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 0b609eb373dd1c3114bbe2651791022ff413d2c2)

3 years agocrun: bump to version 0.19.1
Oskari Rauta [Tue, 18 May 2021 23:53:33 +0000 (02:53 +0300)]
crun: bump to version 0.19.1

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 616d867e48ce966e690ee04ed3e367ae82ad9eb7)

3 years agocrun: Don't build on arc
Eneas U de Queiroz [Sun, 11 Apr 2021 22:36:16 +0000 (19:36 -0300)]
crun: Don't build on arc

The package needs libseccomp, which does not currently support arc.
In order to avoid a circular dependency, we must avoid arc here as well.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 048e1d2d6380aae6c50b92ed9f863855ddf8823d)

3 years agocrun: add package crun
Oskari Rauta [Mon, 29 Mar 2021 21:42:15 +0000 (00:42 +0300)]
crun: add package crun

crun is the prefered container run-time of podman, it's faster than
runc and has a much lower memory footprint.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 01d1a4969e258f7b08a1284e30bfa9bceba62b9c)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Fixes: #15870
3 years agoauc: update to version 0.1.8
Daniel Golle [Wed, 30 Jun 2021 00:38:50 +0000 (01:38 +0100)]
auc: update to version 0.1.8

This fixes support for x86, auc now selects the right combined image
depending on the system being booted in EFI mode or not.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 1204cb82f9af803c4045527576bb9f317b9a20b6)

3 years agodelve: add package
Niels Widger [Tue, 15 Jun 2021 17:33:58 +0000 (13:33 -0400)]
delve: add package

Signed-off-by: Niels Widger <niels@qacafe.com>
3 years agoMerge pull request #15987 from G-M0N3Y-2503/backport-cache-domains-fix-wildcard
Rosen Penev [Mon, 28 Jun 2021 23:34:40 +0000 (16:34 -0700)]
Merge pull request #15987 from G-M0N3Y-2503/backport-cache-domains-fix-wildcard

cache-domains: Fixed missing wildcard entries

3 years agocache-domains: Fixed missing wildcard entries 15987/head
Gerard Ryan [Sun, 27 Jun 2021 06:11:34 +0000 (16:11 +1000)]
cache-domains: Fixed missing wildcard entries

The fix requires the use of the generated dnsmasq `lancache.conf` file.
So I moved configuration of the hosts directory out of the UCI and into
the generated dnsmasq configuration file to simplify the script.

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
3 years agoMerge pull request #15976 from rs/nextdns-1.33.11-openwrt-21.02
Rosen Penev [Sat, 26 Jun 2021 19:43:56 +0000 (12:43 -0700)]
Merge pull request #15976 from rs/nextdns-1.33.11-openwrt-21.02

[21.02] nextdns: Update to version 1.33.11

3 years agonextdns: Update to version 1.33.11 15976/head
Olivier Poitrey [Sat, 26 Jun 2021 18:00:32 +0000 (18:00 +0000)]
nextdns: Update to version 1.33.11

Signed-off-by: Olivier Poitrey <rs@nextdns.io>
3 years agotravelmate: startup fixes
Dirk Brenken [Fri, 25 Jun 2021 21:15:06 +0000 (23:15 +0200)]
travelmate: startup fixes

* fix a possible race condition during boot
* use the new "device" syntax in the network wizard

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit e407566cce9ceb1457352dc18e613dc5cc845814)

3 years agoMerge pull request #15940 from mkrkn/openwrt-21.02
Rosen Penev [Wed, 23 Jun 2021 23:42:51 +0000 (16:42 -0700)]
Merge pull request #15940 from mkrkn/openwrt-21.02

[21.02] openvpn: update to 2.5.3

3 years agoopenvpn: update to 2.5.3 15940/head
Magnus Kroken [Wed, 23 Jun 2021 18:34:42 +0000 (20:34 +0200)]
openvpn: update to 2.5.3

Remove upstreamed patch and fix test.sh script.

Signed-off-by: Magnus Kroken <mkroken@gmail.com>
3 years agotcpreplay: bump to version 4.3.4
Alexandru Ardelean [Tue, 4 May 2021 12:20:29 +0000 (15:20 +0300)]
tcpreplay: bump to version 4.3.4

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 7436d944fa44e27816401868a11a4c9115eb717d)

3 years agopython-lxml: bump to version 4.6.3
Alexandru Ardelean [Mon, 29 Mar 2021 06:49:47 +0000 (09:49 +0300)]
python-lxml: bump to version 4.6.3

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 89a6254b0a81106a04edab9734051e4f182067df)

3 years agopillow: bump to version 8.1.2
Alexandru Ardelean [Mon, 8 Mar 2021 07:38:06 +0000 (09:38 +0200)]
pillow: bump to version 8.1.2

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit c6f8536efa9036b5653b508d4252fbb5b3d7c492)

3 years agoddns-scripts: get l3 device for bind network using curl
Florian Eckert [Tue, 22 Jun 2021 08:07:22 +0000 (10:07 +0200)]
ddns-scripts: get l3 device for bind network using curl

If pppoe is used for wan access. script set 'eth1' as interface for curl
call. The correct interface is however 'pppoe-wan'.

The script uses 'network_get_physdev' function to get real device for
bind_network but this is wrong. We need instead the l3_device of the the
logical interface.

In case if we don't use pppoe connection - 'l3_device' is equal to real device.

This was reported by the github user `welderpb` with P/R:
 https://github.com/openwrt/packages/pull/14431

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 036079b308a6e1ba1ac690a1643264696780ae5e)

3 years agoddns-scripts: Fix for domains with dash
Wenli Looi [Wed, 19 May 2021 18:42:25 +0000 (11:42 -0700)]
ddns-scripts: Fix for domains with dash

Signed-off-by: Wenli Looi <wlooi@ucalgary.ca>
(cherry picked from commit 9e2aad3fde6b1a9c4c0080c2c7434ab41f0b36ce)

3 years agoddns-scripts: Fix for wildcard subdomain
Wenli Looi [Wed, 19 May 2021 06:08:52 +0000 (23:08 -0700)]
ddns-scripts: Fix for wildcard subdomain

Signed-off-by: Wenli Looi <wlooi@ucalgary.ca>
(cherry picked from commit 93344aafa065ebfe63330e60f7d02ecdcf39c9b8)

3 years agoMerge pull request #15924 from nxhack/2102_icu_691
Josef Schlehofer [Sun, 20 Jun 2021 08:04:24 +0000 (10:04 +0200)]
Merge pull request #15924 from nxhack/2102_icu_691

[21.02] icu: bump to 69.1

3 years agoicu: bump to 69.1 15924/head
Hirokazu MORIKAWA [Sun, 20 Jun 2021 05:16:04 +0000 (14:16 +0900)]
icu: bump to 69.1

ICU 69 updates to CLDR 39 locale data with many additions and corrections. ICU 69 also includes significant improvements for measurement unit formatting and number formatting in general, as well as many other bug fixes and enhancements.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
3 years agoMerge pull request #15909 from mlichvar/21.02-chrony-fix-uci-allow
Rosen Penev [Sat, 19 Jun 2021 20:13:15 +0000 (13:13 -0700)]
Merge pull request #15909 from mlichvar/21.02-chrony-fix-uci-allow

[21.02] chrony: fix uci NTP access configuration

3 years agochrony: fix uci NTP access configuration 15909/head
Miroslav Lichvar [Sat, 19 Jun 2021 11:14:05 +0000 (13:14 +0200)]
chrony: fix uci NTP access configuration

The chrony interface hotplug script reuses the handle_allow function
from the init script to allow NTP access on interfaces specified in uci.
The function requires /lib/functions/network.sh. Include the file in the
hotplug script to make the function work as expected.

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
3 years agoMerge pull request #15901 from nxhack/2102_node_14171
Rosen Penev [Sat, 19 Jun 2021 07:41:33 +0000 (00:41 -0700)]
Merge pull request #15901 from nxhack/2102_node_14171

[21.02] node: bump to 14.17.1

3 years agoMerge pull request #15905 from 1715173329/yq-2102
Rosen Penev [Sat, 19 Jun 2021 07:41:06 +0000 (00:41 -0700)]
Merge pull request #15905 from 1715173329/yq-2102

[openwrt-21.02] yq: Update to 4.9.6

3 years agoschroot: fix typo
Chen Minqiang [Sun, 6 Jun 2021 04:46:11 +0000 (12:46 +0800)]
schroot: fix typo

Signed-off-by: Chen Minqiang <ptpt52@gmail.com>
(cherry picked from commit 2b52fb6221cc86a9583fc6df38ad0319cdadf5ec)

3 years agoknot-resolver: change scheduling priority
Jan Pavlinec [Thu, 17 Jun 2021 12:59:32 +0000 (14:59 +0200)]
knot-resolver: change scheduling priority

This should prevent some resolving issues by other router app.

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 1d1eca32dbc344cc76a86279a03519c726465daa)

3 years agosamba4: update to 4.13.9
Andy Walsh [Thu, 17 Jun 2021 16:28:08 +0000 (18:28 +0200)]
samba4: update to 4.13.9

* update to 4.13.9

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
(cherry picked from commit 2057fc9ee4d9d33f2b0e48ec9c860945ae227394)

3 years agoyq: Update to 4.9.6 15905/head
Tianling Shen [Fri, 18 Jun 2021 14:57:44 +0000 (22:57 +0800)]
yq: Update to 4.9.6

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 6c6b74b8f8ef81633bcdf2ae4defd7fc28e56c7a)

3 years agopython-cryptography: bump to version 3.4.7
Alexandru Ardelean [Tue, 15 Jun 2021 09:25:34 +0000 (12:25 +0300)]
python-cryptography: bump to version 3.4.7

Dropped patches:
  0004-Replace-EVP_CIPHER_CTX_cleanup-with-EVP_CIPHER_CTX_r.patch
  0005-Switch-get_-Update-APIs-to-get0.patch

Reworked patches:
  0001-Add-new-ASN1_STRING_get0_data-API.patch
  0006-Add-X509_STORE_CTX_trusted_stack-compatibility-macro.patch
These 2 require that we keep only the CUSTOMIZATIONS stuff for now. Maybe
later we can drop this.

Ran 'make package/python-cryptography/refresh'.

Added patch:
  0004-disable-rust.patch
upstream did a sloppy job with the CRYPTOGRAPHY_DONT_BUILD_RUST logic; we
need to patch it, to make sure the setuptools-rust isn't installed.
We may need to carry this patch in our tree for a bit longer than upstream,
because in newer versions, CRYPTOGRAPHY_DONT_BUILD_RUST logic gets removed.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 01d1b4581e885bc878de6e075b19a1008ef93569)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
3 years agonode: bump to 14.17.1 15901/head
Hirokazu MORIKAWA [Fri, 18 Jun 2021 09:06:04 +0000 (18:06 +0900)]
node: bump to 14.17.1

Notable Changes:
deps: update ICU to 69.1 (MichaĆ«l Zasso)
errors: align source-map stacks with spec (Benjamin Coe)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
3 years agobanip: refine/fix nginx search pattern
Dirk Brenken [Thu, 17 Jun 2021 20:23:24 +0000 (22:23 +0200)]
banip: refine/fix nginx search pattern

* fix issue with nginx search pattern reported in forum support thread

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 0c16840e26ed0a8a808f22a1f5f4dbd265e0a903)

3 years agonano: update to 5.8
Hannu Nyman [Thu, 17 Jun 2021 16:03:11 +0000 (19:03 +0300)]
nano: update to 5.8

Update nano editor version to 5.8.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 6f2ac237a18d0c8258ca838ff4df2245960b7aef)

3 years agoauc: compare versions using dpkg/opkg's verrevcmp
Daniel Golle [Mon, 26 Apr 2021 18:16:19 +0000 (19:16 +0100)]
auc: compare versions using dpkg/opkg's verrevcmp

Using strcmp() to compare a version string doesn't work well.
Use verrevcmp() function from opkg instead.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 794cf3ac59deb28b30f63aeb26f58726595cd885,
as it was previously skipped also switch PKG_REVISION back to manual
to keep it in sync with master branch)

3 years agodjango: bump to version 3.2.4
Alexandru Ardelean [Mon, 14 Jun 2021 12:12:05 +0000 (15:12 +0300)]
django: bump to version 3.2.4

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 24a8f5874155398df8e64b29897a511d5d603e03)

3 years agoauc: update to version 0.1.7
Daniel Golle [Tue, 15 Jun 2021 08:34:17 +0000 (09:34 +0100)]
auc: update to version 0.1.7

No longer fail in case a package is part of multiple lists (which may
happen temporarily in case it becomes 'nonshared').
Bump version to prepare for sync accross branches.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 9150e82768c14785c17b77d406a5f9217edd5b5f)

3 years agoauc: fix several issues
Daniel Golle [Sun, 13 Jun 2021 18:41:57 +0000 (19:41 +0100)]
auc: fix several issues

 * don't segfault if server reply is incomplete
 * always request 'generic' image on x86/generic and x86/64
 * make SNAPSHOT branches sticky, eg. stay on 21.02-SNAPSHOT and do
   not 'upgrade' to 21.02.0-rc2.
 * output requested server URL when debugging

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 02bc1fc929e285153dee318f858f6781bab49895)

3 years agoauc: support queue_position status from server
Daniel Golle [Wed, 17 Mar 2021 21:09:50 +0000 (21:09 +0000)]
auc: support queue_position status from server

Display position in queue while waiting for build.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 5b7ff1ad655e78d9f3c9ed51ecec1a4f91ac2404)

3 years agodockerd: refactoring uciadd and ucidel handling
Florian Eckert [Fri, 11 Jun 2021 09:26:20 +0000 (11:26 +0200)]
dockerd: refactoring uciadd and ucidel handling

This change makes the handling of adding and deleting interface, device
bridge and firewall more robust.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 0fded274ecf7af94ac3fa00d5cc22c686789ba3b)

3 years agopython3: Add readline to dependency finder script
Jeffery To [Sun, 13 Jun 2021 18:21:53 +0000 (02:21 +0800)]
python3: Add readline to dependency finder script

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 1eeeba60d8cffc2f655c1ecbb277ca6734ac46b7)

3 years agomg: bump to 6.9
Hirokazu MORIKAWA [Mon, 14 Jun 2021 03:33:57 +0000 (12:33 +0900)]
mg: bump to 6.9

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
3 years agoMerge pull request #15857 from jefferyto/python3-readline-openwrt-21.02
Josef Schlehofer [Mon, 14 Jun 2021 07:53:33 +0000 (09:53 +0200)]
Merge pull request #15857 from jefferyto/python3-readline-openwrt-21.02

[openwrt-21.02] python3: add python3-readline subpackage

3 years agobanip: update 0.7.9
Dirk Brenken [Sat, 12 Jun 2021 21:00:50 +0000 (23:00 +0200)]
banip: update 0.7.9

* add switch 'ban_fetchinsecure' to allow insecure downloads
  without certificate check (disabled by default)
* better explain 'ban_fetchparm' in readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 945513860dcf39a9976659a9458574cd9e38ac3b)