summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* nano: update to 5.0Hannu Nyman2020-08-121-2/+2
| | | | | | | | Update nano editor to version 5.0. http://git.savannah.gnu.org/cgit/nano.git/tree/NEWS Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi> (cherry picked from commit 409633f0ddd4baefc85e89077a6e74fd2135884f)
* Merge pull request #13057 from odmdas/odmdas-freeradius3-Makefile-18.06Rosen Penev2020-08-081-2/+6
|\ | | | | [18.06] freeradius3: add missing conffiles to Makefile
| * freeradius3: add missing conffiles to MakefileAlexey Dobrovolsky2020-08-091-2/+6
|/ | | | | | | | | | | | | | | | | | | | | | Config files /etc/freeradius3/policy.d/accounting /etc/freeradius3/policy.d/filter /etc/freeradius3/proxy.conf /etc/freeradius3/sites-available/default and link /etc/freeradius3/sites-enabled/default are in the freeradius3 package and are mentioned in the main config file /etc/freeradius3/radiusd.conf Thus, they must be explicitly specified in the Makefile. File /etc/freeradius3/sites/default is not included in the package, is not created during installation, is not mentioned in the main config file and should therefore be excluded from the Makefile. (backported from commit f6974b8) Signed-off-by: Alexey Dobrovolsky <dobrovolskiy.alexey@gmail.com>
* Merge pull request #13023 from stangri/18.06-simple-adblockRosen Penev2020-08-052-4/+6
|\ | | | | [18.06] simple-adblock: README and config update
| * simple-adblock: README and config updateStan Grishin2020-08-042-4/+6
|/ | | | Signed-off-by: Stan Grishin <stangri@melmac.net>
* Merge pull request #12999 from jjm2473/libtasn1-support-host-compileRosen Penev2020-08-031-2/+5
|\ | | | | libtasn1: add host build
| * libtasn1: add host-buildAndy Walsh2020-08-041-2/+5
|/ | | | | | | * samba4 complains that it cant find the libasn1 host bins Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com> (cherry picked from commit 42e9057d41f9d59916daa9d716734f25a666b55a)
* Merge pull request #12989 from jjm2473/netatalk-fix-CE-dtraceRosen Penev2020-08-031-1/+2
|\ | | | | netatalk: fix compile error in mac os
| * netatalk: fix compile error in mac osLiangbin Lian2020-08-031-1/+2
| | | | | | | | | | | | fix compile error in mac os when dtrace installed. Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
* | Merge pull request #12991 from jjm2473/libgpg-error-fix-gawk50-3Rosen Penev2020-08-012-0/+170
|\ \ | |/ |/| libgpg-error: Fix compilation with GAWK 5.0
| * libgpg-error: Fix compilation with GAWK 5.0Liangbin Lian2020-08-022-0/+170
|/ | | | | | Patch from Upstream. Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
* Merge pull request #12882 from jefferyto/python3-backport-patches-openwrt-18.06Rosen Penev2020-07-205-1/+344
|\ | | | | [openwrt-18.06] python3: Backport security fixes
| * python3: Backport security fixesJeffery To2020-07-205-1/+344
|/ | | | | | | | This backports fixes for security issues, including: * CVE-2020-14422: Hash collisions in IPv4Interface and IPv6Interface * CVE-2019-20907: Infinite loop in the tarfile module Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* haveged: update to 1.9.13Hannu Nyman2020-07-181-2/+2
| | | | | | | Update haveged to version 1.9.13. Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi> (cherry picked from commit 28cf20129081f9c6b8778b243cc3df1f610544c4)
* Merge pull request #12661 from jefferyto/python-3.6.11-openwrt-18.06Rosen Penev2020-06-302-3/+3
|\ | | | | [openwrt-18.06] python3: Update to 3.6.11
| * python3: Update to 3.6.11Jeffery To2020-07-012-3/+3
|/ | | | | | | | | This contains a fix for CVE-2020-8492 (Denial of service in urllib.request.AbstractBasicAuthHandler)[1]. [1]: https://docs.python.org/release/3.6.11/whatsnew/changelog.html#python-3-6-11-release-candidate-1 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* Merge pull request #12615 from stangri/18.06-https-dns-proxyRosen Penev2020-06-251-1/+10
|\ | | | | [18.06] https-dns-proxy: re-add conffiles and add description to Makefile
| * https-dns-proxy: re-add conffiles and add description to MakefileStan Grishin2020-06-261-1/+10
|/ | | | Signed-off-by: Stan Grishin <stangri@melmac.net>
* Merge pull request #12598 from stangri/18.06-https-dns-proxyRosen Penev2020-06-253-5/+3
|\ | | | | [18.06] https-dns-proxy: bugfix: remove eDNS support
| * https-dns-proxy: bugfix: remove eDNS supportStan Grishin2020-06-253-5/+3
|/ | | | Signed-off-by: Stan Grishin <stangri@melmac.net>
* haveged: update to 1.9.12Hannu Nyman2020-06-211-2/+2
| | | | | | | Update haveged to version 1.9.12 Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi> (cherry picked from commit 6392d50c3180b5da7a4ba041decf7a229d0e1c53)
* haveged: update to 1.9.11Hannu Nyman2020-06-141-3/+3
| | | | | | | Update haveged to version 1.9.11 Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi> (cherry picked from commit ca30b0ff91846a407469f6a77d1cbaf6b150d06d)
* haveged: move init script from 13 to 01Karel Kočí2020-06-142-2/+2
| | | | | | | | | | | | | This is intended as a match with standard urngd. They serve same purpose and urngd starts as first with 00. Starting haveged later can create issues if you replace urngd with it. The example problem is if uci-defaults script decides to generate certificate. Haveged can supply entropy but it is started later and to mitigate this urngd would still have to be installed. This means that haveget can't serve as replacement without moving it to match start order of urngd. Signed-off-by: Karel Kočí <karel.koci@nic.cz> (cherry picked from commit 1ef38f45d982beb46b2df6d3582ad0bc2b0007ca)
* Merge pull request #12508 from stangri/18.06-simple-adblockEtienne Champetier2020-06-135-128/+141
|\ | | | | [18.06] simple-adblock: racially-neutral names
| * simple-adblock: racially-neutral namesStan Grishin2020-06-135-128/+141
|/ | | | Signed-off-by: Stan Grishin <stangri@melmac.net>
* Merge pull request #12455 from stangri/18.06-simple-adblockRosen Penev2020-06-083-6/+6
|\ | | | | [18.06] simple-adblock: remove obsolete dshield.org links from config
| * simple-adblock: remove obsolete dshield.org links from configStan Grishin2020-06-083-6/+6
|/ | | | Signed-off-by: Stan Grishin <stangri@melmac.net>
* Merge pull request #12335 from stangri/18.06-simple-adblockHannu Nyman2020-06-035-35/+65
|\ | | | | [18.06] simple-adblock: bugfix: proper error reporting on failed downloads; lists update script
| * simple-adblock: bugfix: proper error reporting on failed downloads; lists ↵Stan Grishin2020-05-275-35/+65
|/ | | | | | update script Signed-off-by: Stan Grishin <stangri@melmac.net>
* nano: update to 4.9.3Hannu Nyman2020-05-241-2/+2
| | | | | | | | Update nano version to 4.9.3 Minor bugfix release. Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi> (cherry picked from commit 38be46a7ae496cf9f01dd2fd6fee74bc9f1b2673)
* bind: update to version 9.11.19Josef Schlehofer2020-05-202-29/+2
| | | | | | | | | | Fixes: CVE-2020-8616 CVE-2020-8617 Remove backported patch Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* Merge pull request #12235 from jefferyto/python-openssl-ca-certs-openwrt-18.06Rosen Penev2020-05-204-6/+6
|\ | | | | [openwrt-18.06] python-openssl,python3-openssl: Add dependency on ca-bundle
| * python-openssl,python3-openssl: Add dependency on ca-bundleJeffery To2020-05-204-4/+4
| | | | | | | | | | | | | | | | | | The ssl module assumes OpenSSL can load the default trust anchors (root CA certificates). From https://github.com/openwrt/packages/issues/12209 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
| * Python: Fix compile of host modulesJan Kardell2020-05-201-1/+1
| | | | | | | | | | | | | | | | | | Add -rpath linker option to host build, pointing to staging/hostpkh/lib. It's needed to find the correct host libs during runtime, without it the hosts libs may be used instaead, causing failures. Signed-off-by: Jan Kardell <jan.kardell@telliq.com> (cherry picked from commit 0311e58bb645b8f5a2b96528d78edc90c811ed94)
| * Python3: Fix host build on OpenSUSEJan Kardell2020-05-201-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | The linker option -rpath is required to find libs in staging_dir. Now it is included when building host modules. Without it the import test of the _ctypes and _uuid modules would fail. The _ctypes module uses libffi.so.6 from staging, but OpenSUSE LEAP 15 has libffi.so.7. It will also fail on LEAP 42.x, Fedora28 and 29 and future or old versions of Ubuntu. Fix needed in master and 18.06 branches. Signed-off-by: Jan Kardell <jan.kardell@telliq.com> (cherry picked from commit 6ade5a1e3adb189d062b707e2b8f731c9faab844)
* | unbound: update to version 1.10.1Josef Schlehofer2020-05-191-2/+2
|/ | | | | | | | Fixes: CVE-2020-12662 CVE-2020-12663 Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* Merge pull request #12207 from micmac1/mar-1806-10413Hannu Nyman2020-05-181-5/+5
|\ | | | | [18.06] mariadb: minor version bump with CVE fixes
| * mariadb: bump to 10.1.45Sebastian Kemper2020-05-181-5/+5
|/ | | | | | | | | | | | | | Fixes: CVE-2020-2752 CVE-2020-2812 CVE-2020-2814 This commit also moves mysql_upgrade to the client package and installs the configuration files readable for all, so that the clients can read them. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* php7: update to version 7.2.31Michael Heimpold2020-05-161-2/+2
| | | | | | | | This fixes: - CVE-2019-11048 Signed-off-by: Michael Heimpold <mhei@heimpold.de> (cherry picked from commit 2e6bd4cb86682b224803325127d3f777d40b3231)
* Merge pull request #12142 from EricLuehrsen/unbound_1806_1100Hannu Nyman2020-05-111-6/+7
|\ | | | | [openwrt-18.06] unbound: update to 1.10.0
| * unbound: update to 1.10.0Eric Luehrsen2020-05-101-6/+7
|/ | | | | cherry-pick: f779ef48cd21474acf72ee151588737273a509c2 Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
* Merge pull request #12058 from stangri/18.06-vpnbypassHannu Nyman2020-05-033-61/+51
|\ | | | | [18.06] vpnbypass: bugfix: remove non-ASCII from system log; update README
| * vpnbypass: bugfix: remove non-ASCII from system log; update READMEStan Grishin2020-05-023-61/+51
|/ | | | Signed-off-by: Stan Grishin <stangri@melmac.net>
* youtube-dl: update to version 2020.3.24Josef Schlehofer2020-05-011-2/+2
| | | | Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* Merge pull request #11995 from jefferyto/python-2.7.18-openwrt-18.06Josef Schlehofer2020-04-294-6/+6
|\ | | | | [openwrt-18.06] python: Update to 2.7.18, refresh patches
| * python: Update to 2.7.18, refresh patchesJeffery To2020-04-294-6/+6
|/ | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* mwan3: Fix json_load fails with some datayurtesen2020-04-282-2/+2
| | | | | | | | | | | | Sometimes the return value of `ubus -S call network.interface.wan status` cause `json_load` to return `Failed to parse message data` error. To avoid this, the JSON data always should be quoted with double quotes. Signed-off-by: Evren Yurtesen <eyurtese@abo.fi> Removed quoatation marks from commit heading Signed-off-by: Florian Eckert <fe@dev.tdt.de> (cherry picked from commit 94e0c78826b15c95c40bfa82bbf8bba35dc56961)
* libarchive: update to 3.4.2Rosen Penev2020-04-281-9/+9
| | | | | | | | | | Switch to normal tarballs. Remove autoreconf as a result. Several Makefile cleanups for consistency. Signed-off-by: Rosen Penev <rosenp@gmail.com> (cherry picked from commit c22dd1bf74fa5836a88fa417b467767bcfe8a4ff) (cherry picked from commit 2085b990ffc875a5157c02a9e2b5bd04c8eb35b3)
* libarchive: update to version 3.4.1 (security fix)Jan Pavlinec2020-04-281-2/+2
| | | | | | | | Fixes CVE-2019-19221 Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz> (cherry-picked from df634dcc926650de22248b89620c649c0fef7602) (cherry picked from commit ba43556aed90705bc04fd074d39ee6ea012a71f2)
* php7: update to version 7.2.30Josef Schlehofer2020-04-251-3/+3
| | | | | | | | | Fixes: CVE-2020-7066 CVE-2020-7064 Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry picked from commit 09738290a319cc2af74a0be9a52aa5a76b6ca98e)